44538 matches found
CVE-2026-7198: Improper Access Control
CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, and availability of affected installations...
OPENSUSE-SU-2026:10938-1 perl-HTTP-Daemon-6.170.0-1.1 on GA media
These are all security issues fixed in the perl-HTTP-Daemon-6.170.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-45967
These are all security issues fixed in the libmozjs-115-0-115.15.0-9.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10933-1 hauler-1.4.3-5.1 on GA media
These are all security issues fixed in the hauler-1.4.3-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10941-1 trivy-0.71.0-1.1 on GA media
These are all security issues fixed in the trivy-0.71.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-45760
Name of the Vulnerable Software and Affected Versions Progress Sitefinity versions 15.4.8623 through 15.4.8629 Description Improper Access Control in web services allows a remote unauthenticated attacker to access restricted content. This can lead to a full compromise of confidentiality, integrit...
DoS (Denial of Service) io.netty:netty-codec Dependency in Bamboo Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows a...
Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.7
Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.8.7 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.8.7 release that simplify the process of...
Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.7
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.8.7 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.8.7 release that simplify the process of...
Important: Red Hat Security Advisory: resource-agents security update
An update for resource-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this...
Important: Red Hat Security Advisory: resource-agents security update
An update for resource-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
OPENSUSE-SU-2026:10928-1 vifm-0.14.4-1.1 on GA media
These are all security issues fixed in the vifm-0.14.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10918-1 OpenImageIO-3.1.14.0-1.1 on GA media
These are all security issues fixed in the OpenImageIO-3.1.14.0-1.1 package on the GA media of openSUSE Tumbleweed...
java-26-openjdk-26.0.1.0-1.1 on GA media (moderate)
java-26-openjdk-26.0.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10893-1 Rating: moderate Cross-References: CVE-2026-22007 CVE-2026-22008 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 CVE-2026-34268 CVE-2026-34282 CVSS scores: CVE-2026-22007 SUSE : 2.9...
libzypp-17.38.10-1.1 on GA media (moderate)
libzypp-17.38.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:10896-1 Rating: moderate Cross-References: CVE-2026-25707 CVSS scores: CVE-2026-25707 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...
ffmpeg-8-8.1.1-3.1 on GA media (moderate)
ffmpeg-8-8.1.1-3.1 on GA media Announcement ID: openSUSE-SU-2026:10890-1 Rating: moderate Cross-References: CVE-2025-10256 CVE-2025-1594 CVE-2025-9951 CVE-2026-30997 CVSS scores: CVE-2025-10256 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-10256 SUSE : 6.8...
PT-2026-116283
Уязвимость функции vhost zerocopy complete компонента drivers/vhost/net.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...
OPENSUSE-SU-2026:10929-1 weblate-5.17.1-1.1 on GA media
These are all security issues fixed in the weblate-5.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
Frappe Helpdesk get_dashboard_data() Data Compromise
The vulnerability of the getdashboarddata function in the Frappe Helpdesk customer support platform relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...