6735 matches found
CVE-2026-40622 affecting package unbound for versions less than 1.25.1-1
CVE-2026-40622 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1
CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-43617 affecting package rsync for versions less than 3.4.3-1
CVE-2026-43617 affecting package rsync for versions less than 3.4.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-3592 affecting package bind for versions less than 9.20.23-1
CVE-2026-3592 affecting package bind for versions less than 9.20.23-1. A patched version of the package is available...
CVE-2026-45232 affecting package rsync for versions less than 3.4.3-1
CVE-2026-45232 affecting package rsync for versions less than 3.4.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5947 affecting package bind for versions less than 9.20.23-1
CVE-2026-5947 affecting package bind for versions less than 9.20.23-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-47784 affecting package memcached for versions less than 1.6.27-5
CVE-2026-47784 affecting package memcached for versions less than 1.6.27-5. A patched version of the package is available...
CVE-2026-47783 affecting package memcached for versions less than 1.6.27-5
CVE-2026-47783 affecting package memcached for versions less than 1.6.27-5. A patched version of the package is available...
CVE-2026-9054
The provided documents describe CVE-2026-9054 as a network-facing kernel panic triggered when an attacker sends packets (TCP, IL, RUDP, RUDP, or GRE) whose length is shorter than the header size. The description is consistent across NVD entries and related sources, but there are no explicit detai...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: rubygem-nokogiri (UTSA-2026-016729)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016729 advisory. Nokogiri is an open source XML and HTML library for Ruby. Nokogiri = 1.13.4. There are no known workarounds for this issue. Tenable has extracted the preceding...
CVE-2026-7890
In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation enabling redirect-to-internal bypasses. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.1 with a...
NPM: md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)
NPM: md-fileserver: Stored/Reflected XSS when viewing Markdown raw HTML allowed vulnerability discovered by ? in WordPress Npm md-fileserver versions 1.10.3...
Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy
...
Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls
...
CVE-2026-33814 affecting package golang for versions less than 1.26.3-1
CVE-2026-33814 affecting package golang for versions less than 1.26.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-37459 affecting package frr for versions less than 10.5.4-1
CVE-2026-37459 affecting package frr for versions less than 10.5.4-1. A patched version of the package is available...
CVE-2026-44431 affecting package python-urllib3 for versions less than 2.0.7-5
CVE-2026-44431 affecting package python-urllib3 for versions less than 2.0.7-5. A patched version of the package is available...
WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Doan Dinh Van in WordPress Plugin Visualizer versions 4.0.0...