1155907 matches found
CVE-2026-59901 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, cloudwatch-exporter, infinispan, akhq, spark, cassandra, keycloak, kserve-modelmesh, management-api-for-apache-cassandra-5.0, tez, thingsboard, apache-nifi, neo4j, apicurio-registry, celeborn, cassandra-reaper, logstash, druid, zipkin,...
GHSA-558V-64GR-WGG4 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, cloudwatch-exporter, infinispan, akhq, spark, cassandra, keycloak, kserve-modelmesh, management-api-for-apache-cassandra-5.0, tez, thingsboard, apache-nifi, neo4j, apicurio-registry, celeborn, cassandra-reaper, logstash, druid, zipkin,...
SUSE CVE-2026-46600
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
GHSA-558V-64GR-WGG4 vulnerabilities
Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, zookeeper-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, cassandra, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmes...
CVE-2026-59901 vulnerabilities
Vulnerabilities for packages: hadoop-fips, tez, kayenta-fips, wavefront-proxy, airbyte-server, kafbat-ui-fips, zookeeper-fips, elasticsearch, logstash, opensearch, spark, kayenta, kafbat-ui, cassandra, knative-kafka-broker, apicurio-registry-fips, cloudwatch-exporter, thingsboard, kserve-modelmes...
CVE-2026-10050 vulnerabilities
Vulnerabilities for packages: tez, cruise-control, apache-tika, dependency-track, spark, solr-fips, apache-jena-fuseki, cruise-control-fips, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, apache-hop, solr, reposilite...
GHSA-2FVJ-HGJ9-J2GR vulnerabilities
Vulnerabilities for packages: tez, cruise-control, apache-tika, dependency-track, spark, solr-fips, apache-jena-fuseki, cruise-control-fips, spark-kubernetes-operator-fips, traccar, akhq, spark-kubernetes-operator, spark-fips, neo4j, kafka, jenkins, druid, kafka-fips, apache-hop, solr, reposilite...
RHEL 8 : kernel (RHSA-2026:45115)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45115 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1...
PT-2026-64319
Name of the Vulnerable Software and Affected Versions lakeFS versions prior to 1.83.0 commit 71a45ee Description An authentication bypass exists in the '/setup comm prefs' endpoint. This allows unauthenticated attackers to overwrite operator metadata, such as email, name, and company, after the...
PT-2026-64324
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access exists in the qmp-usbc component of the qcom phy. The swing tbl and pre emphasis tbl are defined as 4x4 arrays with valid indices from 0 to 3. However, the...
RHEL 8 : kernel-rt (RHSA-2026:45116)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45116 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
RHEL 9 : kernel (RHSA-2026:45192)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45192 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1...
RHEL 10 : kernel (RHSA-2026:45114)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45114 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/notify: call...
CVE-2026-47724
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the /api/v1/ route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself admits this at internal/api/hosts.go:384: "API trusts the bearer toke...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)
Last week, there were 91 vulnerabilities disclosed in WordPress Core, 80 WordPress Plugins and no WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 62 Vulnerability Researchers that contributed to WordPress Security last week. Review those...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: wildfly, scala, sonarqube, gradle, infinispan, akhq, spark, tez, apache-nifi, apicurio-registry, cass-config-builder, dependency-track, logstash, druid, keycloak-config-cli, apache-nifi-registry, strimzi-kafka-operator, flyway, opensearch, spdx-tools-java...
EUVD-2026-48426
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the /api/v1/ route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself admits this at internal/api/hosts.go:384: "API trusts the bearer toke...
CVE-2026-47724 nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the /api/v1/ route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself admits this at internal/api/hosts.go:384: "API trusts the bearer toke...
CVE-2026-47724 nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the /api/v1/ route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself admits this at internal/api/hosts.go:384: "API trusts the bearer toke...
CVE-2026-47724 nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the /api/v1/ route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself admits this at internal/api/hosts.go:384: "API trusts the bearer toke...