BELL-CVE-2026-63868

Bulletin has no description...

CVE-2026-64023

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output aggregator module. This vulnerability occurs when an error condition causes memory to be prematurely freed while still being referenced in a lookup table. A local attacker could potentially exploit this timing issue, leading...

CVE-2026-64007

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

SUSE CVE-2026-16378

Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16404

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the mtkvcodecprobe function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver for multimedia devices in Linux operating systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service...

Linux kernel DMA Engine Heap Buffer Overflow DoS

The vulnerability of the ptissuepending function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

AlmaLinux 8 : grafana (ALSA-2026:11507)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:11507 advisory. golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-32282 crypto/tls: golang: Go crypto/tls: Denial of Service via...

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

PT-2026-63539

Name of the Vulnerable Software and Affected Versions Drupal Lunr exposed filters versions . Description An issue exists within the exposed filters of Drupal Lunr. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Plone 4.x < 4.0.10 / 4.1.x < 4.1.1 Multiple Vulnerabilities (HF 20110928)

The version of Plone installed on the remote host is 4.x prior to 4.0.10 or 4.1.x prior to 4.1.1. It is, therefore, affected by the following vulnerabilities: - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used allows remote attackers to execute arbitrary commands via vectors related t...

SUSE SLED15 / SLES15 Security Update : nghttp2 (SUSE-SU-2026:3153-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3153-1 advisory. This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request...

SUSE SLED15 / SLES15 Security Update : wget (SUSE-SU-2026:3148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3148-1 advisory. - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

PT-2026-63537

Name of the Vulnerable Software and Affected Versions Drupal Commerce Elavon affected versions not specified Description A security issue exists in the Drupal Commerce Elavon project. The project has been marked as unsupported, and the security flaw remains unaddressed by the maintainer...