PT-2026-30806

Name of the Vulnerable Software and Affected Versions Rack::Session versions 2.0.0 through 2.1.1 Description Rack::Session is a session management implementation for Rack. Versions 2.0.0 through 2.1.1 incorrectly handle decryption failures when configured with secrets. If cookie decryption fails,...

PT-2026-30983

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, POST /api/v1/auth/sign-in creates a valid session for banned accounts before verifying the supplied password. That session is then accepted across authenticated /api routes, enabling account data access and...

PT-2026-31033

Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects non release branches...

PT-2026-30822

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Firefox ESR versions prior to 115.34.1 and 140.9.1 Thunderbird versions prior to 149.0.2 and 140.9.1 Description Memory safety bugs are present in Firefox and Thunderbird, with some showing evidence of memory...

Mozilla多款产品 缓冲区错误漏洞

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

PT-2026-31042

Name of the Vulnerable Software and Affected Versions The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension affected versions not specified Description A cross-site scripting XSS issue exists in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension. This allows for XSS attacks...

Ubuntu: Security Advisory (USN-8152-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR < 140.9.1

The version of Firefox ESR installed on the remote Windows host is prior to 140.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-27 advisory. - Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0....

CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2

CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...

CVE-2026-23865 affecting package freetype for versions less than 2.13.2-2

CVE-2026-23865 affecting package freetype for versions less than 2.13.2-2. A patched version of the package is available...

CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2

CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2. A patched version of the package is available...

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...

CVE-2026-25541 affecting package netavark for versions less than 1.10.3-7

CVE-2026-25541 affecting package netavark for versions less than 1.10.3-7. A patched version of the package is available...

CVE-2025-71152 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-71152 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-33055 affecting package trident for versions less than 0.22.0-1

CVE-2026-33055 affecting package trident for versions less than 0.22.0-1. A patched version of the package is available...

CVE-2026-23154 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23154 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

SUSE CVE-2026-34933

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version...

CVE-2026-5577

A vulnerability has been found in Song-Li crossbrowser up to ca690f0fe6954fd9bcda36d071b68ed8682a786a. This affects an unknown part of the file flask/uniquemachineapp.py of the component details Endpoint. Such manipulation of the argument ID leads to sql injection. The attack can be executed...

CVE-2026-34764

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 33.0.0-alpha.1 to before 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, apps that use offscreen rendering with GPU shared textures may be vulnerable to a use-after-free. Under certain...