6293 matches found
Moderate: Red Hat Security Advisory: General availability of the satellite/iop-yuptoo-rhel9 container image
A new satellite/iop-yuptoo-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and...
Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image
A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...
OPENSUSE-SU-2026:11040-1 grafana-11.6.14+security04-4.1 on GA media
These are all security issues fixed in the grafana-11.6.14+security04-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11045-1 traefik2-2.11.50-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.50-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-50000
Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne General Ledger version 9.2 Description A flaw in the E1 Foundation component allows a low-privileged attacker with network access via SMB Server Message Block, a network file sharing protocol to compromise the...
PT-2026-50040
Name of the Vulnerable Software and Affected Versions Oracle iSetup versions 12.2.3 through 12.2.15 Description An issue exists in the General Ledger Update Transform, Reports component of the Oracle iSetup product within Oracle E-Business Suite. A low privileged attacker with network access via...
python311-zeroconf-0.149.16-1.1 on GA media (moderate)
python311-zeroconf-0.149.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:11036-1 Rating: moderate Cross-References: CVE-2026-48487 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
CVE-2016-20083
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
CVE-2016-20083
WordPress More Fields Plugin 2.1 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions by disabling CSRF token validation. Malicious pages can trick logged-in administrators into adding or deleting custom fields and boxes on the Write/E...
CVE-2016-20083 WordPress More Fields Plugin 2.1 Cross-Site Request Forgery
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
EUVD-2016-10895
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
CVE-2016-20083 WordPress More Fields Plugin 2.1 Cross-Site Request Forgery
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
PT-2026-49221
WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxe...
OPENSUSE-SU-2026:11034-1 perl-Crypt-PBKDF2-0.261630-1.1 on GA media
These are all security issues fixed in the perl-Crypt-PBKDF2-0.261630-1.1 package on the GA media of openSUSE Tumbleweed...
libopenssl-3-devel-3.5.3-6.1 on GA media (moderate)
libopenssl-3-devel-3.5.3-6.1 on GA media Announcement ID: openSUSE-SU-2026:11023-1 Rating: moderate Cross-References: CVE-2026-34180 CVE-2026-34182 CVE-2026-34183 CVE-2026-42764 CVE-2026-42766 CVE-2026-42767 CVE-2026-42768 CVE-2026-42769 CVE-2026-42770 CVE-2026-45445 CVE-2026-45446 CVE-2026-45447...
OPENSUSE-SU-2026:11030-1 crun-1.28-1.1 on GA media
These are all security issues fixed in the crun-1.28-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-49732
Name of the Vulnerable Software and Affected Versions aiosmtplib versions prior to 5.1.1 Description The software fails to reject embedded carriage return and line feed CRLF bytes in email addresses. When a caller-supplied address containing these bytes is passed to the SMTP.mail, SMTP.rcpt,...
python311-paramiko-5.0.0-1.1 on GA media (moderate)
python311-paramiko-5.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11025-1 Rating: moderate Cross-References: CVE-2018-1000805 CVE-2018-7750 CVE-2026-44405 CVSS scores: CVE-2018-1000805 SUSE : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-7750 SUSE : 10...
chromedriver-149.0.7827.114-1.1 on GA media (moderate)
chromedriver-149.0.7827.114-1.1 on GA media Announcement ID: openSUSE-SU-2026:11029-1 Rating: moderate Cross-References: CVE-2026-12007 CVE-2026-12008 CVE-2026-12009 CVE-2026-12010 CVE-2026-12011 CVE-2026-12012 CVE-2026-12013 CVE-2026-12014 CVE-2026-12015 CVE-2026-12016 CVE-2026-12017...