3961 matches found
EUVD-2026-52569
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
[SECURITY] Fedora 44 Update: nebula-1.11.0-1.fc44
A scalable overlay networking tool with a focus on performance, simplicity and security...
DEBIAN-CVE-2026-69248
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of .example.com, python-cryptography's verifier...
[SECURITY] Fedora 44 Update: gh-2.97.0-2.fc44
A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...
Fedora 44 : curl (2026-e691fbbfe7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e691fbbfe7 advisory. - Fix trailing dot domain super cookie CVE-2026-8924 - Fix SSH improper host validation CVE-2026-9547 - Fix password leak with netrc and user in URL...
Fedora 44 : gh (2026-4e77362489)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4e77362489 advisory. Update to 2.97.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard , the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware...
[SECURITY] Fedora 43 Update: libgit2-1.9.6-1.fc43
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
CVE-2026-15662
CVE-2026-15662 affects the WordPress plugin “Advanced Woo Labels – Product Labels & Badges for WooCommerce” up to version 2.48. The vulnerability is a Stored Cross-Site Scripting via the bg_color parameter, caused by insufficient input sanitization and output escaping. An attacker with contributo...
[SECURITY] Fedora 44 Update: php-8.5.9-1.fc44
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
[SECURITY] Fedora 44 Update: postgresql16-16.14-1.fc44
PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...
EUVD-2026-51596
Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configured RSS feed URLs from FeedReaderController::getResponse to feedIo-read without scheme or private-address validation, allowing a backend user with module-edit...
[SECURITY] Fedora 44 Update: pack-0.40.8-1.fc44
pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...
Fedora 44 : postgresql16 (2026-f8ee1fd482)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f8ee1fd482 advisory. Automatic update for postgresql16-16.14-1.fc44. Changelog for postgresql16 Thu May 14 2026 Packit - 16.14-1 - Update to version 16.14 - Resolves:...
Fedora 44 : php (2026-6131a972fe)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6131a972fe advisory. PHP version 8.5.9 30 Jul 2026 Core: Fixed bug GH-22290 AST pretty printing does not correctly handle strings containing NUL. iliaal Fixed bug GH-222...
BIT-SQLITE-2026-51297
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...
CLEANSTART-2026-QP97203 Security fixes in helm 4.0.5-r2
Package helm version 4.0.5-r2 fixes 43 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27143, CVE-2026-27144...
CLEANSTART-2026-JV61743 Security fixes in pulumi-kubernetes-operator 2.7.0-r0
Package pulumi-kubernetes-operator version 2.7.0-r0 fixes 42 vulnerabilities: CVE-2024-7598, CVE-2025-1767, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136...