PT-2026-134632

TuxCare rebuilt date-and-time to address 1 CVE. Fixed in 0.11.1-tuxcare.1...

PT-2026-120571

Name of the Vulnerable Software and Affected Versions SchedulePress versions prior to 5.3.5 Description An authorization flaw exists that allows authenticated users with Contributor-level permissions to modify the status and publish date of any post. This is possible due to a missing capability...

DEBIAN-CVE-2026-113020

Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113020

Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113020

Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113020

Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-118717

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the Date component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page...

Google Chrome Vulnerability: CVE-2026-113020

Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This flaw stems from improper input validation within the Date object, potentially allowing remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Security update for virtiofsd (important)

openSUSE security update: security update for virtiofsd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22079-1 Rating: important References: bsc1257912 bsc1283239 Cross-References: CVE-2026-25727 CVSS scores: CVE-2026-25727 SUSE : 7.5...

CVE-2026-110191 Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions

The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information...

CVE-2026-110191

The Product Delivery Date for WooCommerce – Lite WordPress plugin (versions before 3.3.2 ) is vulnerable to an Order Information Disclosure flaw. The root cause is a missing capability check before the plugin discloses order details through its calendar view AJAX actions . This allows users with ...

WordPress Product Delivery Date for WooCommerce plugin < 3.3.2 - Contributor+ Order Information Disclosure vulnerability

Contributor+ Order Information Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin Product Delivery Date for WooCommerce – Lite versions 3.3.2...

CVE-2026-110191 Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions

The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information...

Astra Linux – vulnerability in ruby2.5

In the Date gem up to version 3.2.0 for Ruby, Date.parse can lead to a ReDoS Regular Expression Denial of Service attack via a long string input. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. The values passed to various Text options are...

Astra Linux – Vulnerability in libusrsctp

The usrsctp before December 20, 2019, has out-of-bounds reads in sctploadaddressesfrominit...

Unity Linux 20.1070e Security Update: perl-Date-Manip (UTSA-2026-130414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130414 advisory. Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in parsetime. parsetime removes a time...

Unity Linux 20.1070e Security Update: perl-Date-Manip (UTSA-2026-130413)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130413 advisory. Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture...