196225 matches found
CVE-2026-1747: Authentication Bypass Using an Alternate Path or Channel
GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packag...
Important Photon OS Security Update - PHSA-2026-5.0-0774
Updates of 'vim' packages of Photon OS have been released...
Linux Distros Unpatched Vulnerability : CVE-2026-2785
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
PT-2026-21997
Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.11 through 18.7.4 GitLab EE versions 18.8 through 18.8.4 GitLab EE versions 18.9 through 18.9.0 Description A flaw existed in GitLab EE that, under specific circumstances, could have allowed Developer-role users with...
GitLab EE 安全漏洞
GitLab Enterprise Edition EE is a content management system provided by the American company GitLab. There were security vulnerabilities in versions of GitLab EE from 17.11 to 18.7.5, as well as in versions 18.8 to 18.8.5 and 18.9 to 18.9.1. These vulnerabilities stemmed from the possibility that...
OPENSUSE-SU-2026:10251-1 cockpit-packages-4.1-4.1 on GA media
These are all security issues fixed in the cockpit-packages-4.1-4.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-2760
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firef...
Important Photon OS Security Update - PHSA-2026-5.0-91-0774
Updates of 'vim' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2026-4.0-0968
Updates of 'go', 'linux', 'vim' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2026-5.0-0771
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2026-5.0-91-0771
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
CVE-2026-21218 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21218 vulnerabilities
Vulnerabilities for packages: dotnet...
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens
Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential harvesting and cryptocurrency key theft. The campaign has been codenamed SANDWORMMODE by supply...
Oracle Linux 9 : munge (ELSA-2026-3034)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3034 advisory. - Fix CVE-2026-25506 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...
Fedora: Security Advisory (FEDORA-2026-c06fd97a53)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Package
Overview NCryptYo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in tensorflow-opt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c2197ee3bfb727ff46f407a50a515013ad05c423bfe202eea90eb6b593f08b14 Package is likely a dependency confusion against some legitimate extension packages for TensorFlow but contains just cryptominers. When calling the "start"...