6103 matches found
OPENSUSE-SU-2026:11050-1 warewulf4-4.7.0-1.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Helm CLI v4.1.4 release
General availability release of Helm CLI v4.1.4. Helm is the package manager for Kubernetes, used to define, install, and upgrade applications as reusable charts. This release delivers the Helm v4.1.4 binaries built and distributed by Red Hat...
GHSA-9X8Q-7H8H-WCW9 vulnerabilities
Vulnerabilities for packages: py3-vllm-cuda-12.4, airflow, apache-beam-python-3.11-sdk, awx, mlflow, authentik, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-12.9, apache-beam-python-3.12-sdk, metaflow-service-fips, open-webui, request-1276, authentik-fips, mlflow-fips,...
CVE-2026-46893
Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards component: E1 Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise JD Edwards EnterpriseOne...
Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.8
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.8.8 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.8.8 release that simplify the process of...
Moderate: Red Hat Security Advisory: General availability of the satellite/iop-yuptoo-rhel9 container image
A new satellite/iop-yuptoo-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and...
Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image
A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...
PT-2026-50040
Name of the Vulnerable Software and Affected Versions Oracle iSetup versions 12.2.3 through 12.2.15 Description An issue exists in the General Ledger Update Transform, Reports component of the Oracle iSetup product within Oracle E-Business Suite. A low privileged attacker with network access via...
OPENSUSE-SU-2026:11040-1 grafana-11.6.14+security04-4.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security04-4.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-50000
Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne General Ledger version 9.2 Description A flaw in the E1 Foundation component allows a low-privileged attacker with network access via SMB Server Message Block, a network file sharing protocol to compromise the...
OPENSUSE-SU-2026:11045-1 traefik2-2.11.50-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.50-1.1 package on the GA media of openSUSE Tumbleweed...
python311-zeroconf-0.149.16-1.1 on GA media (moderate)
python311-zeroconf-0.149.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:11036-1 Rating: moderate Cross-References: CVE-2026-48487 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
CVE-2016-20083
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
CVE-2016-20083 WordPress More Fields Plugin 2.1 Cross-Site Request Forgery
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
CVE-2016-20083 WordPress More Fields Plugin 2.1 Cross-Site Request Forgery
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
CVE-2016-20083
WordPress More Fields Plugin 2.1 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions by disabling CSRF token validation. Malicious pages can trick logged-in administrators into adding or deleting custom fields and boxes on the Write/E...
EUVD-2016-10895
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
PT-2026-49732
Name of the Vulnerable Software and Affected Versions aiosmtplib versions prior to 5.1.1 Description The software fails to reject embedded carriage return and line feed CRLF bytes in email addresses. When a caller-supplied address containing these bytes is passed to the SMTP.mail, SMTP.rcpt,...