36635 matches found
RUSTSEC-2026-0082 zantetsu-ffi is unmaintained
The zantetsu-ffi crate is no longer maintained. The Node.js, Python, and C FFI bindings it provided were removed as part of the zantetsu 0.2 release, which refocused the project on its core Rust library. A tombstone version 0.2.0 has been published and 0.1.4 has been yanked. There is no replaceme...
CVE-2026-31067
A remote command execution RCE vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string...
python3.12 security update
An update is available for python3.12. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...
PT-2026-30822
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Firefox ESR versions prior to 115.34.1 and 140.9.1 Thunderbird versions prior to 149.0.2 and 140.9.1 Description Memory safety bugs are present in Firefox and Thunderbird, with some showing evidence of memory...
Mozilla多款产品 缓冲区错误漏洞
Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...
PT-2026-30806
Name of the Vulnerable Software and Affected Versions Rack::Session versions 2.0.0 through 2.1.1 Description Rack::Session is a session management implementation for Rack. Versions 2.0.0 through 2.1.1 incorrectly handle decryption failures when configured with secrets. If cookie decryption fails,...
Mozilla Firefox ESR < 140.9.1
The version of Firefox ESR installed on the remote Windows host is prior to 140.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-27 advisory. - Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0....
PT-2026-31033
Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects non release branches...
PT-2026-30983
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, POST /api/v1/auth/sign-in creates a valid session for banned accounts before verifying the supplied password. That session is then accepted across authenticated /api routes, enabling account data access and...
PT-2026-31042
Name of the Vulnerable Software and Affected Versions The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension affected versions not specified Description A cross-site scripting XSS issue exists in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension. This allows for XSS attacks...
Ubuntu: Security Advisory (USN-8152-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6
CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...
CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3
CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...
CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2
CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2. A patched version of the package is available...
CVE-2026-33055 affecting package trident for versions less than 0.22.0-1
CVE-2026-33055 affecting package trident for versions less than 0.22.0-1. A patched version of the package is available...
CVE-2026-25541 affecting package netavark for versions less than 1.10.3-7
CVE-2026-25541 affecting package netavark for versions less than 1.10.3-7. A patched version of the package is available...
CVE-2026-23865 affecting package freetype for versions less than 2.13.2-2
CVE-2026-23865 affecting package freetype for versions less than 2.13.2-2. A patched version of the package is available...