171490 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-94650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...
Linux Distros Unpatched Vulnerability : CVE-2026-94648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are...
Linux Distros Unpatched Vulnerability : CVE-2026-94638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are...
Linux Distros Unpatched Vulnerability : CVE-2026-96990
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are...
SUSE-SU-2026:23997-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...
Zoho manageengine - Cross-Site Scripting
Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...
Apache Log4j2 - Remote Code Injection
Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations. id: CVE-2021-45046 info: name: Apache Log4j2 - Remote Code Injection author: ImNightmaree severity: critical description: Apache Log4j2 Thread Context Lookup Pattern is...
RHEL 10 : kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 (RHSA-2026:72831)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72831 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This pat...
ROOT-APP-MAVEN-CVE-2026-43512 CVE-2026-43512 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-43512 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-65905 CVE-2026-65905 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-65905 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
PyJWT BOM Bypass
Affected Package- Package: PyJWT pyjwt on PyPI- Repository: https://www.google.com/url?q=https://github.com/jpadilla/pyjwt=gmail=1781794518474000=E- Affected version: 2.13.0- Vulnerability class: Algorithm confusion / patch bypass--- Root CausePyJWT 2.13.0 introduced a guard in...
PYSEC-2026-4150 PyJWT BOM Bypass
Affected Package - Package: PyJWT pyjwt on PyPI - Repository: https://www.google.com/url?q=https://github.com/jpadilla/pyjwt&source=gmail&ust=1781794518474000&sa=E - Affected version: 2.13.0 - Vulnerability class: Algorithm confusion / patch bypass --- Root Cause PyJWT 2.13.0 introduced a guard i...
ROOT-APP-MAVEN-GHSA-2R2C-CX56-8933 GHSA-2r2c-cx56-8933 in org.jline:jline-remote-telnet - Patched by Root
Root has patched GHSA-2r2c-cx56-8933 in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...
SUSE-SU-2026:22711-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...
ROOT-APP-NPM-CVE-2025-47949 CVE-2025-47949 in samlify - Patched by Root
Root has patched CVE-2025-47949 in the samlify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-46490 CVE-2026-46490 in samlify - Patched by Root
Root has patched CVE-2026-46490 in the samlify package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-37555 CVE-2026-37555 in libsndfile - Patched by Root
Root has patched CVE-2026-37555 in the libsndfile package for Root:Debian:13. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42577 CVE-2026-42577 in io.netty:netty-transport-native-epoll - Patched by Root
Root has patched CVE-2026-42577 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-45536 CVE-2026-45536 in io.netty:netty-transport-native-epoll - Patched by Root
Root has patched CVE-2026-45536 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...