CVE-2026-24420 phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)

phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below allow an authenticated user without the dlattachment permission to download FAQ attachments due to a incomprehensive permissions check. The presence of a right key is improperly validated as proof of authorization in...

CLEANSTART-2025-YJ25356 Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for CVE details...

CLEANSTART-2025-AZ51267 Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

CLEANSTART-2025-US16386 Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.2-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-OB44035 Security fixes for CVE-2025-61729, GHSA-f6x5-jh6r-wrfv, GHSA-j5w8-q4qc-rx2x applied in versions: 1.16.2-r2

Multiple security vulnerabilities affect the velero-fips package. These issues are resolved in later releases. See references for individual CVE and GHSA details...

Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-53407)

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

PT-2026-1947

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 21.2.1 and earlier Description A cleartext transmission of sensitive information issue exists in Broadcom DX NetOps Spectrum on Windows and Linux, potentially allowing for sniffing attacks. The issue involv...

PT-2026-1579

Name of the Vulnerable Software and Affected Versions Premmerce WooCommerce Customers Manager plugin for WordPress versions through 1.1.14 Description The Premmerce WooCommerce Customers Manager plugin for WordPress is susceptible to Reflected Cross-Site Scripting. This is due to inadequate input...

CVE-2026-21674

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path iccFromXml. This issue is fixed in version 2.3.1.1...

Google Chrome Security Update (stable-channel-update-for-desktop_18-2025-12) - Mac OS X

Google Chrome is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

PT-2026-1259

Name of the Vulnerable Software and Affected Versions jwsthemes FreeAgent versions through 2.1.2 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for unauthorized access and...

CVE-2025-52426

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2023-54197 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"

In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fix...

PT-2025-53888

Name of the Vulnerable Software and Affected Versions Atte Moisio AM Events versions through 1.13.1 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can ...

PT-2025-53898

Name of the Vulnerable Software and Affected Versions Magnigenie RestroPress versions through 3.2.4.2 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-Site Scripting XSS issue. This allows for the injection of...

PT-2025-53795

Name of the Vulnerable Software and Affected Versions Crocoblock JetBlog versions through 2.4.7 Description An authorization issue exists in Crocoblock JetBlog, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations...

PT-2025-53297

Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08.316 Description The software contains an unauthenticated SQL Injection issue through the intmenu parameter. This allows for potential unauthorized access to the database. Recommendations Update MyNET to a version lat...

PT-2025-53284

Name of the Vulnerable Software and Affected Versions Bit Assist versions through 1.5.11 Description An authorization issue exists in Bit Apps Bit Assist. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update B...

PT-2025-53085

Name of the Vulnerable Software and Affected Versions Essekia Tablesome versions through 1.1.35.1 Description An issue exists in Essekia Tablesome that allows the retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update Essekia Tablesom...