CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

EUVD-2026-41633

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

CVE-2026-27657

Gitea versions prior to 1.25.5 are vulnerable to an authorization bypass through a user-controlled key within the email settings process. This flaw allows an attacker to send crafted requests to relevant endpoints to modify another user's primary email address . Affected components include gitea....

Chromium: CVE-2026-13837 Inappropriate implementation in CSS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Certified Asterisk 20.7-cert11 Security Release

The Asterisk Development Team would like to announce security release Certified Asterisk 20.7-cert11. It addresses 18 security issues...

Asterisk 20.20.1 Security Release

The Asterisk Development Team would like to announce security release Asterisk 20.20.1. It addresses 19 security issues...

Asterisk 22.10.1 Security Release

The Asterisk Development Team would like to announce security release Asterisk 22.10.1. It addresses 20 security issues...

Asterisk 21.12.3 Security Release

The Asterisk Development Team would like to announce security release Asterisk 21.12.3. It addresses 20 security issues...

Asterisk 23.4.1 Security Release

The Asterisk Development Team would like to announce security release Asterisk 23.4.1. It addresses 20 security issues...

Certified Asterisk 22.8-cert3 Security Release

The Asterisk Development Team would like to announce security release Certified Asterisk 22.8-cert3. It addresses 20 security issues...

CVE-2026-27660: Improper Access Control

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

CVE-2026-28705: Improper Limitation of a Pathname to a Restricted Directory

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

ROS-20260703-73-0017

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260703-73-0022

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

PT-2026-55606

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.5 Description The software uses release tag names and asset names as filesystem path components during the process of dumping release assets. This behavior allows specially crafted names to manipulate the resulting...

PT-2026-55546

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain LTS2026 release versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain LTS2025 release versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data...

PT-2026-55601

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.5 Description Draft release data or attachments can be accessed by users who do not possess the necessary write permissions. Recommendations Update to version 1.25.5 or later...

Photon OS 4.0: Gst PHSA-2026-4.0-1045

An update of the gst package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1045. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid32498...

Fedora 44 : pdns-recursor (2026-088b60c071)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-088b60c071 advisory. update to latest upstream release to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 45 : docker-compose (2026-caecf8f2d7)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-caecf8f2d7 advisory. Automatic update for docker-compose-5.3.0-1.fc45. Changelog Thu Jul 2 2026 Bradley G Smith - 5.3.0-1 - Update to release v5.3.0 - Resolves:...