30000 matches found
PT-2026-49151
A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permission issues. The attack requires local access. The exploit has been published and may be used. The vendor was...
OPENSUSE-SU-2026:11039-1 libvinylapi3-9.0.1-1.1 on GA media
These are all security issues fixed in the libvinylapi3-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11032-1 google-osconfig-agent-20260611.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260611.00-1.1 package on the GA media of openSUSE Tumbleweed...
RockyLinux 8 : mysql:8.0 (RLSA-2026:25919)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:25919 advisory. mysql: InnoDB unspecified vulnerability CPU Apr 2026 CVE-2026-22004 mysql: Information Schema unspecified vulnerability CPU Apr 2026 CVE-2026-22001 mysq...
PT-2026-49732
Name of the Vulnerable Software and Affected Versions aiosmtplib versions prior to 5.1.1 Description The software fails to reject embedded carriage return and line feed CRLF bytes in email addresses. When a caller-supplied address containing these bytes is passed to the SMTP.mail, SMTP.rcpt,...
OPENSUSE-SU-2026:11030-1 crun-1.28-1.1 on GA media
These are all security issues fixed in the crun-1.28-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2026:2376-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2376-1 advisory. This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: Security fixes: -...
SUSE SLES15 Security Update : openssh (SUSE-SU-2026:2375-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2375-1 advisory. This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialize...
MGASA-2026-0207 Updated packages fix security vulnerabilities
CVE-2026-49261 MariaDB server has unsafe parameter handling in wsrepnotifycmd CVE-2026-48165 MariaDB: unsafe usage of wsrepsstreceiveaddress values on the joiner side CVE-2026-48163 MariaDB: wsrep SST unsafe parameter handling on the donor side rsync...
RLSA-2026:25239 Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing CVE-2026-73...
PT-2026-49119
Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description Gzip decompression routines process data in limited-size chunks but lack an overall limit for the total size of accumulated decompressed chunks. This allows a malicious server to consume unlimited...
OPENSUSE-SU-2026:11021-1 kitty-0.47.3-1.1 on GA media
These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11028-1 librav1e0_8-0.8.1-2.1 on GA media
These are all security issues fixed in the librav1e08-0.8.1-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-50083
The CVE-2026-50083 entry concerns the Aqara IAM/SSO Gateway (gw-builder.aqara.com) using a hardcoded OAuth client credential (CWE-798). This weak credential could enable a fully unauthenticated, remote takeover when combined with CVE-2026-50082, CVE-50084, and CVE-50085. Documented CVSSv3.1 base ...
Vulnerabilities managed in GitLab Enterprise Edition
GitLab has identified several vulnerabilities in the GitLab Community Edition and Enterprise Edition versions, ranging from 12.0 to 19.0.2, including important releases such as 17.x, 18.10.8, 18.11.5, and 19.0.2. These vulnerabilities affect various components of GitLab CE & EE. Authorized users...
EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-2400)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : iommu/sva: invalidate stale IOTLB entries for kernel address spaceCVE-2025-71202 iommu: disable SVA when CONFIGX86 is...
gstreamer1 -- multiple vulnerabilities
The GStreamer project reports: Multiple security issues were identified and fixed in the GStreamer framework. GStreamer-SA-2026-0030: Missing bounds checks in RTCP SDES packet parsing GStreamer-SA-2026-0031: Integer overflow and truncation in MXF demuxer GStreamer-SA-2026-0032: Out-of-bounds read...
OPENSUSE-SU-2026:11009-1 ffmpeg-7-7.1.4-3.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed...
Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...