39817 matches found
PT-2026-48720
Name of the Vulnerable Software and Affected Versions KanaDojo affected versions not specified Description A command injection issue exists where an attacker with pull request access can execute arbitrary shell commands. This occurs when shell metacharacters are inserted into the version or chang...
PT-2026-48799
Name of the Vulnerable Software and Affected Versions GeoServer DB2 DataStore Extension versions prior to 2.27.0 Description An administrator can perform a JNDI attack through a specially crafted DB2 jdbc url, which can lead to Remote Code Execution RCE. Authenticated users can access the Vector...
ROS-20260611-73-0039
The vulnerability of the Linux operating system’s network protocol implementation is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...
PT-2026-48793
Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3 - 133 Description An Insecure Direct Object Reference IDOR exists in the video subtitle editor of this open source video sharing platform. Due to a lack of authorization, an authenticated user can modify...
CVE-2026-48734
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file could result in a stack overflow due to a missing depth or visited-set check. This issue has been patched in versions 6.9.13-49 and 7.1.2-24...
Missing Release of Memory after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the wand option parser when invalid arguments are provided. An attacker can cause increased memory consumption by supplying specially crafted input. Remediation A fix was pushed into...
CVE-2026-45380
bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, a one-byte off-by-one error in SafeOutPathBuilder::restoreSymlink allows an attacker to craft a .7z archive that, when extracted with bit7z on any non-Windows platform,...
CVE-2026-53464 ImageMagick: Memory Leak in wand option parser when providing invalid arguments
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...
CVE-2026-53460
CVE-2026-53460 (ImageMagick) affects ImageMagick due to a missing check for maximum memory requests in AcquireAlignedMemory, which can trigger an out-of-Memory condition. Affected versions include pre-patch 6.9.13-50 and 7.1.2-25; patches fix in 6.9.13-50 and 7.1.2-25. The CVSS v3.1 base score is...
Important: Red Hat Security Advisory: Submariner v0.21 security fixes and container updates
Submariner v0.21 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2026-42462
CVE-2026-42462 describes an LD-Signature bypass in Fedify caused by JSON-LD named-graph restructuring. The issue allows an attacker to reorganize a signed JSON-LD payload (via features like @graph, @reverse, @included) in a way that changes how the signed ActivityPub activity is interpreted witho...
Critical: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload
Impact Any baileys session under the latest version false in socket config. There are no workarounds for the app state sync jamming...
Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.3 Images Update
New images are available for Red Hat build of Keycloak 26.6.3 and Red Hat build of Keycloak 26.6.3 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...
CVE-2026-50570
Fission prior to v1.25.0 allowed tenant-created Function/Environment CRDs to request securityContext.capabilities.add: ["SYS_TIME"] despite a fixed denylist (SYS_ADMIN, NET_ADMIN, SYS_PTRACE, SYS_MODULE, DAC_READ_SEARCH, DAC_OVERRIDE). The validation/merge-layer sanitization did not block CAP_SYS...
Critical Unauthenticated Authentication Bypass Vulnerability Patched in UpdraftPlus WordPress Plugin
On June 2nd, 2026, we received a submission for a critical Unauthenticated Authentication Bypass vulnerability in UpdraftPlus, a WordPress plugin with more than 3 million active installations. Although the plugin has such a large install base, the vulnerability is only exploitable on sites that...
com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.503)
org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...
com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.503)
org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...
com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.503)
org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...
