147265 matches found
RockyLinux 8 : openssl (RLSA-2026:26275)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:26275 advisory. openssl: Use After Free with SSLfreebuffers CVE-2024-4741 openssl: Heap Use-After-Free in OpenSSL PKCS7verify CVE-2026-45447 Tenable has extracted the...
RHCOS 4 : OpenShift Container Platform 4.18.44 (RHSA-2026:25180)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25180 advisory. - net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 - crypto/x509: crypto/tls: golang: Go: Denial of Servi...
GHSA-3FWP-P5RJ-2PXF Gitea: Missing repository-unit authorization on issue-template API endpoints
Summary Three Gitea API endpoints — GET /repos/owner/repo/issuetemplates, GET /repos/owner/repo/issueconfig and GET /repos/owner/repo/issueconfig/validate — read files from the repository's Code default branch .gitea/ISSUETEMPLATE/ and issueconfig.yaml and return their contents, but are registere...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the GetIssueTemplates, GetIssueConfig, and ValidateIssueConfig API endpoints, which lack proper authorization checks. An attacker can access sensitive configuration files from the Code default branch of a privat...
Gitea: Missing repository-unit authorization on issue-template API endpoints
Summary Three Gitea API endpoints — GET /repos/owner/repo/issuetemplates, GET /repos/owner/repo/issueconfig and GET /repos/owner/repo/issueconfig/validate — read files from the repository's Code default branch .gitea/ISSUETEMPLATE/ and issueconfig.yaml and return their contents, but are registere...
MINI-3WR7-25WJ-MVWH
Bulletin has no description...
MINI-4PV6-9MQM-FMXH
Bulletin has no description...
EUVD-2026-37191
In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
GHSA-F59H-Q822-G45G Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`
Summary forwardauth copyheaders deletes the exact client-supplied identity header before copying the trusted value from the auth gateway. But when the request later goes through phpfastcgi, Caddy normalizes HTTP headers into CGI variables by replacing - with . This lets a client send an underscor...
CVE-2026-46970
...
CVE-2026-46963
...
CVE-2026-46957
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46957
...
CVE-2026-46953
...
CVE-2026-46951
Technical details about CVE-2026-46951 are not publicly provided in the supplied documents. Monitor Oracle security alerts and CVE feeds for updates on affected products, impact, and fixes.
CVE-2026-46946
Technical details are not publicly available in the provided documents for CVE-2026-46946; monitor for updates.
CVE-2026-46935
...
CVE-2026-46919
Technical details about CVE-2026-46919 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records for affected products, impact, and remediation.