11466 matches found
Fedora 43 : apt / python-apt (2026-1c47e433df)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-1c47e433df advisory. Update to latest upstream release apt 3.1.15 and python-apt 3.1.0 ---- Update to latest upstream release apt 3.1.15, also fix build problem with previous...
PT-2026-23597
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect versions prior to build 41186 Description Insufficient access control allows unauthorized deletion of reports. Recommendations Update to build 41186 or later...
PT-2026-23577
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Linux, macOS, Windows versions prior to build 41124 Description Credentials are not deleted from the Acronis Agent after plan revocation. This can potentially lead to unauthorized access or misuse of the store...
git-lfs security update
3.6.1-7 - Rebuild with new Golang - Resolves: RHEL-146860, RHEL-149620 3.6.1-6 - Rebuild with new Golang - Resolves: RHEL-147080 3.6.1-5 - Rebuild with new Golang - Resolves: RHEL-147103...
PT-2026-23599
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Description A sensitive information disclosure can occur due to an improper configuration of a headless browser. Recommendations Update Acronis Cyber Protect to build 41186 or later...
PT-2026-23592
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Description A denial of service condition exists due to inadequate input validation within the authentication logging process. Recommendations Update Acronis Cyber Protect to build 41186 o...
PT-2026-23595
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 Windows versions prior to build 41186 Description A local privilege escalation can occur due to improper handling of soft links. This allows an attacker with local access to potentially gain elevated privileges on the...
PT-2026-23593
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 Linux, Windows versions prior to build 41186 Description The software suffers from improper authorization checks, leading to potential unauthorized resource manipulation. Recommendations Update Acronis Cyber Protect to...
PT-2026-23584
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 Linux, Windows versions prior to build 41186 Description The software suffers from a flaw related to improper authentication, leading to potential sensitive information disclosure and manipulation. The issue allows for...
PT-2026-23590
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Description The software suffers from an information disclosure and manipulation issue stemming from inadequate authorization checks. This allows for unauthorized access to information and...
CVE-2026-3136
An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...
OPENSUSE-SU-2026:20320-1 Security update for freerdp2
This update for freerdp2 fixes the following issues: Changes in freerdp2: - Multiple CVE fixes: CVE-2026-24491, bsc1257981, CVE-2026-24675, bsc1257982, CVE-2026-24676, bsc1257983, CVE-2026-24679, bsc1257986, CVE-2026-24681, bsc1257988, CVE-2026-24682, bsc1257989, CVE-2026-24683, bsc1257990,...
Information Disclosure
Storybook is vulnerable to Information Disclosure. The vulnerability is due to a bug in how Storybook handles environment variables defined in a .env file, which could, in specific circumstances, lead to those variables being unexpectedly bundled into the artifacts created by the storybook build...
CVE-2025-63912
Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially reverse the encyption and expose credentials...
CVE-2025-67840
Multiple authenticated OS command injection vulnerabilities exist in the Cohesity formerly Stone Ram TranZman 4.0 Build 14614 through TZM1757588060SEP2025FULL.depot web application API endpoints including Scheduler and Actions pages. The appliance directly concatenates user-controlled parameters...
CLSA-2026-1772573053 butane: Fix of CVE-2025-61729
rebuilt with golang = 1.25.7-1.tuxcare.els1 to address the following security issues: - CVE-2025-61729...
CVE-2025-63910
An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file...
CVE-2025-63910
An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file...