193391 matches found
CVE-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packag...
CVE-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packag...
GHSA-MRQ8-RJMW-WPQ3 vulnerabilities
Vulnerabilities for packages: gatus...
Security Bulletin: Multiple vulnerabilities in DataStage on Cloud Pak for Data
Summary DataStage on Cloud Pak for Data is vulnerable to multiple software vulnerabilities due to open source packages. Vulnerability Details CVEID:CVE-2025-61724 DESCRIPTION: The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the...
CVE-2026-21722 vulnerabilities
Vulnerabilities for packages: grafana...
Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware
Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data. The campaign, discovered by Socket, exfiltrates ASP.NET Identity data, including user accounts, role assignments, and permission mappings...
GitLab EE 安全漏洞
GitLab Enterprise Edition EE is a content management system provided by the American company GitLab. There were security vulnerabilities in versions of GitLab EE from 17.11 to 18.7.5, as well as in versions 18.8 to 18.8.5 and 18.9 to 18.9.1. These vulnerabilities stemmed from the possibility that...
Linux Distros Unpatched Vulnerability : CVE-2026-2762
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird...
Important Photon OS Security Update - PHSA-2026-5.0-0774
Updates of 'vim' packages of Photon OS have been released...
Linux Distros Unpatched Vulnerability : CVE-2026-2760
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firef...
Linux Distros Unpatched Vulnerability : CVE-2026-2788
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-2785
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
OPENSUSE-SU-2026:10251-1 cockpit-packages-4.1-4.1 on GA media
These are all security issues fixed in the cockpit-packages-4.1-4.1 package on the GA media of openSUSE Tumbleweed...
Important Photon OS Security Update - PHSA-2026-5.0-91-0774
Updates of 'vim' packages of Photon OS have been released...
PT-2026-21997
Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.11 through 18.7.4 GitLab EE versions 18.8 through 18.8.4 GitLab EE versions 18.9 through 18.9.0 Description A flaw existed in GitLab EE that, under specific circumstances, could have allowed Developer-role users with...
Critical Photon OS Security Update - PHSA-2026-4.0-0968
Updates of 'go', 'linux', 'vim' packages of Photon OS have been released...
@01.software/sdk (>=0.0.1-251008.90016, <=0.1.4), @adenta/cms (>=0.0.6, <=1.1.1-0) +28 more potentially affected by CVE-2026-27567 via payload (>=3.0.0-alpha.49, <=3.74.0-internal.097fb57)
payload NPM version =3.0.0-alpha.49, =0.0.1-251008.90016, =0.0.6, =0.0.3, =1.0.1-beta.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =3.64.0, =0.0.1-beta.0, =0.2.0, =0.2.14 - @remy90/payload-conditions-plugin 0.2.2 and more Source cves: CVE-2026-27567 Source advisory: OSV:GHSA-HHFX-5X8J-F5F6...
Moderate Photon OS Security Update - PHSA-2026-5.0-0771
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...