CLEANSTART-2026-QJ16757 Security fixes in harbor 2.12.4-r1

Package harbor version 2.12.4-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-QH72886 Security fixes in ollama-fips 0.19.0-r3

Package ollama-fips version 0.19.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GR62343 Security fixes in istio-pilot-discovery 1.28.3-r0

Package istio-pilot-discovery version 1.28.3-r0 fixes 1 vulnerabilities: ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-RN96908 Security fixes in lvm-driver 1.8.1-r2

Package lvm-driver version 1.8.1-r2 fixes 1 vulnerabilities: ghsa-m5vv-6r4h-3vj9...

CLEANSTART-2026-MY61588 Security fixes in kafka-fips 3.8.1-r5

Package kafka-fips version 3.8.1-r5 fixes 1 vulnerabilities: CVE-2025-12383...

CLEANSTART-2026-NZ79963 Security fixes in calico 3.31.4-r3

Package calico version 3.31.4-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-KV79736 Security fixes in rabbitmq-cluster-operator 2.19.2-r5

Package rabbitmq-cluster-operator version 2.19.2-r5 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-WN49818 Security fixes in cassandra-reaper-fips 3.6.1-r0

Package cassandra-reaper-fips version 3.6.1-r0 fixes 1 vulnerabilities: ghsa-jc7h-c423-mpjc...

CLEANSTART-2026-IB92846 Security fixes in docker-fips 20.10.16-r0

Package docker-fips version 20.10.16-r0 fixes 1 vulnerabilities: CVE-2022-29526...

CLEANSTART-2026-IZ40410 Security fixes in apko 1.2.3-r0

Package apko version 1.2.3-r0 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below -...

Off-by-one Error

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Off-by-one Error

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2023-25148

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to...

CVE-2021-33688

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained...

CVE-2020-24564

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-59718link is external Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability This type of vulnerability is a frequent atta...

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from an incorrect manipulation of the parameter supplier in the file...

CVE-2022-4982

DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...

weblate-5.14.3-1.1 on GA media (moderate)

weblate-5.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15733-1 Rating: moderate Cross-References: CVE-2025-64326 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the weblate-5.14.3-1....