137163 matches found
RHSA-2026:47750 Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47749 Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:41136 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:40416 Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update
Bulletin has no description...
Security Bulletin: IBM Transformation Extender Advanced is affected by IBM WebSphere Application Server Liberty vulnerabilities
Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine uses WebSphere Application Server Liberty which is affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.25: golang1.25-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-bin-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-docs-1.25.13-0.1.hum1 noarch golang1.25-misc-1.25.13-0.1.hum1 noarch...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.6-0.1.hum1 noarch golang1.26-misc-1.26.6-0.1.hum1 noarch...
CVE-2026-19763
A vulnerability was determined in DTStack Taier 1.4.0. Affected by this issue is the function FileUtils.deleteDirectory of the file ClusterController.java of the component Cluster Creation. This manipulation of the argument clusterName causes path traversal. Remote exploitation of the attack is...
Linux Distros Unpatched Vulnerability : CVE-2026-56859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. CVE-2026-56859 Note that Nessus relies on...
FreeBSD : chromium -- security fixes (a4e5cc5f-d4bc-4f67-ad8e-0f6a9e37064f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a4e5cc5f-d4bc-4f67-ad8e-0f6a9e37064f advisory. Chrome Releases reports: This update includes 5 security fixes: Tenable has extracted the...
.NET 9.0 security, bug fix, and enhancement update
9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235473...
PT-2026-72074
Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.27 Description The install.php endpoint allows the action parameter to be set to reinstall without authentication. This bypasses the installation check because the security guard only executes when the $act variable...
ruby4.0 security, bug fix, and enhancement update
4.0.6-36 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660...
ruby security, bug fix, and enhancement update
3.3.12-14 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: postgresql18: postgresql-18.6-0.1.hum1 aarch64, x8664 postgresql-contrib-18.6-0.1.hum1 aarch64, x8664 postgresql-docs-18.6-0.1.hum1 aarch64, x8664 postgresql-plperl-18.6-0.1.hum1 aarch64, x8664...
CVE-2026-73648 rails-html-sanitizer: Possible XSS vulnerability with certain configurations
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...
CVE-2026-73565 @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake
@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave...
CVE-2026-58427
Private org member list leaked via /members API endpoint — incomplete fix for PR 38145...