3029108 matches found
CVE-2026-121993
wePOS Point Of Sale for WooCommerce before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with only the...
OESA-2026-4723 qt6-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.CVE-2026-105924 Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Q...
OESA-2026-4722 qt6-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.CVE-2026-19248 Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in th...
OESA-2026-4721 qt6-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.CVE-2026-105924 Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Q...
OESA-2026-4718 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls...
OESA-2026-4701 pylint security update
Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...
OESA-2026-4699 pylint security update
Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...
OESA-2026-4700 pylint security update
Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...
OESA-2026-4698 perl-Cpanel-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. %package help Summary : CPanel fork of JSON::XS, fast and correct serializing Provides: perl-Cpanel-JSON-XS-doc...
OESA-2026-4697 perl-Cpanel-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. %package help Summary : CPanel fork of JSON::XS, fast and correct serializing Provides: perl-Cpanel-JSON-XS-doc...
OESA-2026-4666 bind security update
Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: In a BIN...
OESA-2026-4665 bind security update
Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: In a BIN...
OESA-2026-4664 bind security update
Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: In a BIN...
OESA-2026-4663 python-pillow security update
Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 13.0.0,...
CVE-2026-121993 wePOS before 2.0.3 Missing Authorization via payment/process Endpoint
wePOS Point Of Sale for WooCommerce before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with only the...
CVE-2026-121993
wePOS Point Of Sale for WooCommerce before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with only the...
patch-tuesday-report
patch-tuesday-report Small, dependency-free Python CLI that t...
Exploit for CVE-2026-98260
Rootline Android front end for CVE-2026-98260 POSIX CPU...