7868 matches found
EUVD-2026-60104
opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...
CVE-2026-74885
opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...
CVE-2026-74885 openssl_encrypt before 1.4.0 Logging Bug and Race Condition
opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...
BIT-OPENBAO-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...
BIT-AIRFLOW-2026-68969 Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext
Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...
-
Vuln-Archive Skill A Claude Codehttps://claude.com/product...
PT-2026-73415
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...
CVE-2026-74885: Improper Output Neutralization for Logs
opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...
PT-2026-76621
openssl encrypt versions before 1.4.0 contain a logging bug in restore hidden modules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099930)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099930 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPSET records auditlogcapset records the effectiv...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099694)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099694 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100534)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100534 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099902)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099902 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The at variant of getxattr and listxattr are missing fr...
MINI-4CVX-M8J4-63CX
Bulletin has no description...
MINI-F5W8-2VMC-53H8
Bulletin has no description...
MINI-8PMC-WG5W-Q8MG
Bulletin has no description...
cargo-audit-0.22.2~git0.281452c-2.1 on GA media (moderate)
cargo-audit-0.22.2git0.281452c-2.1 on GA media Announcement ID: openSUSE-SU-2026:11512-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...
SUSE CVE-2026-74512
In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...