137162 matches found
CLSA-2026-1786745999 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 14.2.12-tuxcare.3...
CLSA-2026-1786743251 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 12.2.0-tuxcare.4...
CLSA-2026-1786737301 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.11...
CLSA-2026-1786737120 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...
CLSA-2026-1786735405 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...
CVE-2026-73849
In CVE-2026-73849, Emlog (2.6.26 and earlier) allows unauthenticated reinstall via install.php?action=reinstall. The code path bypasses the already-installed guard when act != 'reinstall', letting a remote attacker submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.1.hum1 aarch64, x8664 tempo3.0-3.0.3-0.1.hum1.src src...
CVE-2026-72834
filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...
CVE-2026-72832
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
CVE-2026-72832 Grav before 2.0.12 Stored XSS via quoted-attribute bypass
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
RHSA-2026:54590 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54574 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54550 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54542 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54541 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54538 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:49914 Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:48197 Red Hat Security Advisory: php:8.3 security, bug fix, and enhancement update
Bulletin has no description...