10726 matches found
MINI-MXPF-MPX9-QFG3
Bulletin has no description...
MINI-74QR-PQ7R-2WQJ
Bulletin has no description...
MINI-67X6-65VV-HQW7
Bulletin has no description...
MINI-JH4H-4HF9-4X5F
Bulletin has no description...
MINI-H394-8R59-F4FG
Bulletin has no description...
CGA-V7XC-PC69-85PJ
Bulletin has no description...
OESA-2026-2631 python-pip security update
%changelog Sat Jul 13 2024 yangyuan [email protected] - 23.3.1-2 - Fix CVE-2023-45803 and CVE-2024-37891 Security Fixes: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the JwsJsonContainerRequestFilter method. An attacker can cause the system to process unauthenticated metadata by crafting a request where the first signature entry is not properly...
CVE-2026-50634 Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry
A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...
CVE-2026-50634 Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry
A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...
CGA-9MQF-WXGF-RMVC
Bulletin has no description...
📄 WordPress Gravity Forms 2.10.0.1 File Deletion / Path Traversal
This Metasploit module exploits a vulnerability in the Gravity Forms WordPress plugin versions 2.10.0.1 and below where file URLs stored in form entries are not properly validated. An attacker can inject a crafted entry containing path traversal sequences ../ to reference files outside the intend...
PT-2026-55697
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the shadow MMU Memory Management Unit of the Kernel-based Virtual Machine KVM hypervisor on x86 architectures, affecting both Intel and AMD CPUs. The fla...
PT-2026-49066
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.6 Description An issue exists where the software fails to properly normalize file paths when creating zip or tar archives on Linux hosts. Specifically, the getFiles function uses filepath.ToSlash, which does...
MINI-GC33-F7G4-5VQJ
Bulletin has no description...
MINI-353W-MX93-WXHJ
Bulletin has no description...
MINI-PCCH-6RR4-7CVR
Bulletin has no description...
MINI-C6WP-FMQX-CJQ3
Bulletin has no description...