267955 matches found
GHSA-74W3-63XV-X9MV CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8sexternal transferer can emit an empty...
LatePoint – Calendar Booking Plugin for Appointments and Events: Information Leakage Vulnerability
LatePoint – Calendar Booking Plugin for Appointments and Events. Versions 5.7.4 and earlier have a vulnerability involving information leakage. This vulnerability arises from enumerating UUID prefixes through the ‘params customeruid’ parameter. Unauthorized data is extracted from the stepsloadste...
LatePoint – Calendar Booking Plugin for Appointments and Events: Authorization Issues Vulnerability
LatePoint – Calendar Booking Plugin for Appointments and Events. Versions 5.7.4 and earlier have an authorization issue vulnerability. This vulnerability stems from the verifyOTP function’s non-atomic read-modify-write operation on the OTP verification attempt counter. Without proper conditional...
K000163762: Apache Struts vulnerabilities CVE-2026-73631, CVE-2026-73634, and CVE-2026-73635
Security Advisory Description CVE-2026-73631 Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured...
CLSA-2026-1792162165 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792162164 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792162163 TuxCare security update for @babel/plugin-transform-react-jsx (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792162162 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792162160 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792162159 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792162158 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
CLSA-2026-1792162157 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792162156 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CLSA-2026-1792162155 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.1...
CLSA-2026-1792162154 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.1...
CLSA-2026-1792162145 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792162144 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792162143 TuxCare security update for @babel/plugin-transform-react-display-name (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...