481 matches found
MINI-C7H6-2P2V-5H92
Bulletin has no description...
MINI-G7J4-CMRH-W899
Bulletin has no description...
CVE-2026-4893 affecting package dnsmasq for versions less than 2.92-1
CVE-2026-4893 affecting package dnsmasq for versions less than 2.92-1. A patched version of the package is available...
MINI-JPVH-26HR-397P
Bulletin has no description...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.91 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.91 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
MINI-96GP-4CHP-MR78
Bulletin has no description...
GHSA-35JP-WW65-95WH
creationtimestamp| type| source ---|---|--- 2026-05-29 21:20:01+00:00| seen| https://gist.github.com/konard/e2cdc40115fd7e81d8828ab9496865a2 2026-06-03 14:43:57+00:00| seen| https://t.me/bdufstecru/3216 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205da...
CVE-2026-48027
Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for 18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the...
CVE-2026-45854
The CVE-2026-45854 issue affects the Linux kernel crypto stack, specifically the inside-secure/eip93 driver. The root cause is that EIP93’s options register is used to decide which algorithms are registered; currently, all algorithms are unregistered regardless of hardware support. This can cause...
PT-2026-43499
Name of the Vulnerable Software and Affected Versions My Email Shortcode versions prior to 0.92 Description The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient input sanitization and outp...
Astra Linux – Vulnerability in Thunderbird
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs in Firefox 94. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these...
Astra Linux – Vulnerability in Firefox
Mixed-content checks were unable to analyze opaque origins, resulting in some mixed content being loaded. This vulnerability affects Firefox versions earlier than 92...
Astra Linux – Vulnerability in Firefox
Mozilla developers and community members reported memory safety bugs in Firefox 90. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects versions of...
Astra Linux – Vulnerability in Firefox and Thunderbird
Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption, and we assume that with...
Astra Linux – Vulnerability in Firefox
Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs in Firefox 97. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This...
Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API
Security Advisory: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API Affected Software: Budibase Affected Component: packages/server/src/api/controllers/view/viewBuilder.ts, packages/server/src/api/routes/view.ts CWE: CWE-94 Improper Control of Generation of Code...
CVE-2026-45803 gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection
gh is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users view GitHub Actions workflow logs using gh run view --log or gh run view --log-failed. The vulnerabilit...
The vulnerability was exploited in Exim.
The developers of Exim introduced a vulnerability in the Exim Mail Transfer Agent versions prior to 4.99.3. This vulnerability involves a use-after-free in the BDAT body parsing process, specifically when certain GnuTLS backend configurations are used. An unauthorized attacker can exploit this...