14261 matches found
SUSE-SU-2026:3243-1 Security update for gpg2
This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM bsc1269279...
WordPress ProfileGrid plugin < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering vulnerability
Subscriber+ Cross-User Private Message Thread Deletion and Tampering vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin ProfileGrid versions 5.9.9.7...
CVE-2026-43823
When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in privacy-related settings in Google Chrome prior to 150.0.7871.47 allowed an attacker with privileged network access to leak cross-origin data through malicious network traffic. Chromium security severity: Low...
Privacy/configuration issue when adding local data in views through 'unbound-control'
...
The vulnerability of the hdm_probe() function in the drivers/most/most_usb.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hdmprobe function in the drivers/most/mostusb.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
TencentOS Server 2: gnupg2 (TSSA-2026:0750)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0750 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Security update for gpg2 (low)
openSUSE security update: security update for gpg2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21385-1 Rating: low References: bsc1269279 Cross-References: CVE-2026-57062 CVSS scores: CVE-2026-57062 SUSE : 2.9...
CVE-2026-13061
An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...
Vulnerabilities found in Oracle MySQL Server and MySQL Cluster
Oracle has identified several vulnerabilities in Oracle MySQL Server and MySQL Cluster. These vulnerabilities apply to various versions of Oracle MySQL Server and MySQL Cluster. Some of these vulnerabilities enable attackers with high privileges and network access to cause Denial-of-Service attac...
CVE-2026-55708 Privacy/configuration issue when adding local data in views through 'unbound-control'
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...
SUSE CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private
Summary The POST /api/v1/repos/owner/repo/merge-upstream endpoint continues to synchronize commits from a parent repository after the parent repository has been changed from public to private. A fork created while the parent repository was public can still receive commits made after the parent...
Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
Live reproduction against Gitea 1.26.1 Setup: Gitea 1.26.1 docker stack with two users admin and victim and two OAuth applications owned by different users: Client A: id=5dda747d-7fdd-4694-85ff-ce4f893ce51e owner=admin Client B: id=588f778f-4a41-4914-ae01-85d776c369db owner=victim admin runs an...
CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
UBUNTU-CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
