44054 matches found
OPENSUSE-SU-2026:10960-1 go1.26-1.26.4-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed...
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
Summary Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause...
Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update
Multicluster Global Hub v1.6.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
The vulnerability of the PHPShop content management system lies in the lack of measures taken to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PHPShop content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
OPENSUSE-SU-2026:10957-1 perl-HTML-Parser-3.850.0-1.1 on GA media
These are all security issues fixed in the perl-HTML-Parser-3.850.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10955-1 libmozjs-140-0-140.10.1-2.1 on GA media
These are all security issues fixed in the libmozjs-140-0-140.10.1-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-46303
Name of the Vulnerable Software and Affected Versions Axios versions prior to 0.32.0 Axios versions prior to 1.16.0 Description Axios constructs a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can...
PT-2026-60337
Уязвимость программного обеспечения для управления пользователями беспроводных сетей NETAMS WNAM связана с подделкой межсайтовых запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность, целостность и доступность защищаемой...
bind-9.20.23-2.1 on GA media (moderate)
bind-9.20.23-2.1 on GA media Announcement ID: openSUSE-SU-2026:10915-1 Rating: moderate Cross-References: CVE-2026-3593 CVSS scores: CVE-2026-3593 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
libsoup-2_4-1-2.74.3-21.1 on GA media (moderate)
libsoup-24-1-2.74.3-21.1 on GA media Announcement ID: openSUSE-SU-2026:10917-1 Rating: moderate Cross-References: CVE-2026-1801 CVSS scores: CVE-2026-1801 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2026-1801 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA...
PT-2026-48597
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13-1.1 Description An issue exists allowing path traversal via the keyhint variable. Recommendations Update to version 17.38.13-1.1...
OPENSUSE-SU-2026:10942-1 7zip-26.01-1.1 on GA media
These are all security issues fixed in the 7zip-26.01-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10947-1 erlang27-27.1.3-2.1 on GA media
These are all security issues fixed in the erlang27-27.1.3-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10952-1 sshfs-3.7.6-1.1 on GA media
These are all security issues fixed in the sshfs-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10950-1 perl-Cpanel-JSON-XS-4.410.0-1.1 on GA media
These are all security issues fixed in the perl-Cpanel-JSON-XS-4.410.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10946-1 assimp-devel-6.0.5-3.1 on GA media
These are all security issues fixed in the assimp-devel-6.0.5-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-10650
warmcat libwebsockets (up to 4.5.8) contains a flaw in the SSH Protocol Handler: lws_ssh_parse_plaintext (plugins/protocol_lws_ssh_base/sshd.c) can be triggered by manipulating msg_len, leading to resource consumption. The issue can be exploited remotely; a proof-of-concept exploit has been publi...
Important: Red Hat Security Advisory: Insights proxy Container Image
Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...
DoS (Denial of Service) minimatch Dependency in Confluence Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.0.3, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
