37402 matches found
RHEL 10 : firefox (RHSA-2026:17690)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:17690 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
PT-2026-45007
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.480 Description The software constructs all or part of a code segment using externally-influenced input from an upstream component without properly neutralizing special elements. This can modify the syntax or behavior...
Fedora 42 : php (2026-3a58db70ca)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3a58db70ca advisory. PHP version 8.4.21 07 May 2026 Core: Fixed bug GH-19983 GC assertion failure with fibers, generators and destructors. iliaal Fixed bug GH-21478...
RHEL 9 : firefox (RHSA-2026:17688)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:17688 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
CVE-2026-43890
Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts exhibits a broken authorization pattern. When both collectionId and documentId are supplied in the request, the route...
ECHO-21A6-33D6-5465
Bulletin has no description...
CVE-2026-41674
A flaw was found in xmldom and @xmldom/xmldom, a JavaScript library for parsing and serializing XML. This vulnerability allows an attacker to inject arbitrary XML markup into a document due to improper handling of DocumentType node fields during serialization. By crafting malicious input, an...
MINI-P2XF-XW8J-MQ6W
Bulletin has no description...
MINI-6CP3-R6XR-PH2Q
Bulletin has no description...
MINI-P8JJ-8R52-4795
Bulletin has no description...
MINI-HJH9-PX7X-9RP6
Bulletin has no description...
MINI-72QC-CJ34-GCQW
Bulletin has no description...
CGA-2V28-9JF9-HRQC
Bulletin has no description...
CVE-2026-42889
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
CVE-2026-42889 Relay Server WebSocket authentication bypass when token is omitted
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
CVE-2026-42889
Summary (CVE-2026-42889): Relay Server (used with Obsidian) versions 0.9.0–0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were treated as having full server permissions, all...
CVE-2026-42889 Relay Server WebSocket authentication bypass when token is omitted
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
MINI-4H23-67GQ-XPVW
Bulletin has no description...