256840 matches found
UBUNTU-CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CLSA-2026-1788767433 TuxCare security update for com.jayway.jsonpath (1 CVE)
TuxCare rebuilt 2 com.jayway.jsonpath packages to address 1 CVE. Fixed in 2.6.0-tuxcare.1...
CLSA-2026-1788766641 TuxCare security update for com.jayway.jsonpath (3 CVEs)
TuxCare rebuilt 2 com.jayway.jsonpath packages to address 3 CVEs. Fixed in 2.9.0-tuxcare.1...
CVE-2026-79698
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
CLSA-2026-1788762932 TuxCare security update for org.bouncycastle (4 CVEs)
TuxCare rebuilt 16 org.bouncycastle packages to address 4 CVEs. Fixed in 1.76-tuxcare.4...
CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
CVE-2026-79698
A command injection vulnerability in the Node-RED Library component (function nodered_lib_apply) affects multiple Advantech WISE-6610 series industrial computers running firmware 1.2.1_20251110 . Manipulation of the act argument allows a remote attacker with low privileges to inject commands. The...
CLSA-2026-1788757933 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)
TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.11.0-tuxcare.1...
OPENSUSE-SU-2026:11696-1 curl-8.22.0-1.1 on GA media
These are all security issues fixed in the curl-8.22.0-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260907-73-0501
The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...
OPENSUSE-SU-2026:11712-1 python313-jwcrypto-1.6.0-1.1 on GA media
These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11705-1 kimi-code-0.41.0-1.1 on GA media
These are all security issues fixed in the kimi-code-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11700-1 hauler-2.1.0-3.1 on GA media
These are all security issues fixed in the hauler-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11702-1 jsoup-1.23.2-1.1 on GA media
These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11695-1 cadvisor-0.60.5-3.1 on GA media
These are all security issues fixed in the cadvisor-0.60.5-3.1 package on the GA media of openSUSE Tumbleweed...
MAL-2026-16008 Malicious code in b2b-frontend-external-library (npm)
This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...
OPENSUSE-SU-2026:11708-1 perl-Net-DNS-1.570.0-1.1 on GA media
These are all security issues fixed in the perl-Net-DNS-1.570.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11706-1 bson-devel-2.5.2-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...