CVE-2026-106604

The YITH WooCommerce Compare WordPress plugin (versions 3.15.0 and below ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to inject malicious scripts that are store...

WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin YITH WooCommerce Compare versions = 3.15.0...

Astra Linux – vulnerability in python2.7, python3.7

An issue was found in comparedigest within Lib/hmac.py for Python up to version 3.9.1. Constant-time-defeating optimizations could be applied to the accumulator variable used in hmac.comparedigest...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SCTP: The initialization of additional fields in sctpv6fromsk was incorrect, leading to undefined behavior. SYZbot discovered that sin6scopeid was not properly initialized, causing undefined behavior. sin6scopeid and...

Astra Linux – vulnerability in binutils

An issue was discovered: Binutils objdump prior to version 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via the comparesymbols function...

CVE-2026-106604: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Stored XSS.This issue affects YITH WooCommerce Compare: from n/a through 3.15.0...

PT-2026-115094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Stored XSS.This issue affects YITH WooCommerce Compare: from n/a through 3.15.0...

WordPress YITH WooCommerce Compare: Cross-site Script Vulnerability

WordPress YITH WooCommerce Compare 3.15.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

CVE-2026-70406

Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and retrieve commit history and diffs from a private head...

Exploit for CVE-2026-58222

KDSExtract Exploit for CVE-2026-58222 affecting Samba AD...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 security and extras update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

[SECURITY] Fedora 45 Update: ocaml-ppx-compare-0.17.0-17.fc45

Ppxcompare is a ppx rewriter that derives comparison and equality functions from type representations. The scaffolded functions are usually much faster than OCaml's Stdlib.compare and Stdlib.=3D. Scaffolding functions also give more flexibility by allowing them to be overridden for a specific typ...

CVE-2026-98049

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When executing a 32-bit atomic compare-and-exchange operation on arena memory, the kernel fails to properly clear zero-extend the upper half of the target register as required by BPF specifications. A local attacker with...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-87114

A flaw in kube-compare allows a remote attacker to achieve arbitrary code execution on an operator's workstation. When processing a container:// reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of extracting data from a stopped container. This vulner...

EUVD-2026-88361

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...