25598 matches found
kernel security update
6.12.0-124.56.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
PT-2026-40048
An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request...
MINI-R3H6-5R29-MQ4H
Bulletin has no description...
MINI-PWF8-7H8M-PQHW
Bulletin has no description...
MINI-J3CV-2WCF-W82Q
Bulletin has no description...
MINI-P72F-5CRJ-32FW
Bulletin has no description...
MINI-85WM-WHQ9-P375
Bulletin has no description...
MINI-5WCF-Q463-RW27
Bulletin has no description...
MINI-57VP-2R25-GRC3
Bulletin has no description...
CVE-2026-42950
creationtimestamp| type| source ---|---|--- 2026-05-11 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN03037325 2026-05-13 15:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqn3qbbyj2k 2026-06-03 01:22:01+00:00| seen|...
CVE-2026-43883 WWBN AVideo: IDOR in PayPalYPT agreementCancel.json.php Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements
WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/PayPalYPT/agreementCancel.json.php cancels a PayPal billing agreement using an attacker-supplied agreement parameter without verifying that the authenticated user owns the agreement. A low-privilege...
CVE-2026-42456
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio for another user's chat response within the same workspace...
CVE-2026-41311
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript he...
MINI-X8R3-5RR5-WF28
Bulletin has no description...
MINI-X93F-VJ3X-FJ36
Bulletin has no description...
MINI-WPCG-H264-5C96
Bulletin has no description...
MINI-W56P-4C67-QFJH
Bulletin has no description...
MINI-RW9R-PCWH-PFXR
Bulletin has no description...