36667 matches found
OPENSUSE-SU-2026:21519-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 bsc1271649: CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719: Site isolation issue in the DOM: Navigation component...
CVE-2026-68585
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143
Summary IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating...
CVE-2026-18587
CVE-2026-18587 affects Wavlink WL-NU516U1 (708c073-mt7628). The flaw is in an unknown function of Config Import where manipulating the Password argument can trigger an OS command injection. The issue is exploitable remotely with high impact to confidentiality, integrity, and availability (C/I/A: ...
CVE-2026-12817
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...
CVE-2026-13506
CVE-2026-13506 affects multiple Bouncy Castle for Java lines: Java mainline prior to 1.85; Java LTS prior to 2.73.12; and Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). Root cause is a Lazy ASN.1 sequence that resets the nesting-depth guard, with potential im...
EUVD-2026-52138
In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
CVE-2026-12802 CMS AuthEnvelopedData fails to enforce tag-length on decryption
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
CVE-2026-58061 CCM-family modes write plaintext to caller buffer before tag check
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
CVE-2026-58062
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
CVE-2026-59641
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcmail-fips and bcjmail-fips 1.0.7 1.0.X series, 2.0.7 2.0.X series and...
LifeOS 7.28.3
LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...
python312-3.12.13-8.1 on GA media (moderate)
python312-3.12.13-8.1 on GA media Announcement ID: openSUSE-SU-2026:11428-1 Rating: moderate Cross-References: CVE-2026-0864 CVE-2026-11940 CVE-2026-11972 CVE-2026-15308 CVE-2026-3276 CVE-2026-4360 CVE-2026-7210 CVE-2026-7774 CVE-2026-8328 CVSS scores: CVE-2026-0864 SUSE : 7.5...
OSSEC HIDS 4.2.0
OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...
[SECURITY] [DSA 6409-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6409-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 01, 2026 https://www.debian.org/security/faq -...
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package telegraf for versions less than 1.31.0-25
CVE-2026-56852 affecting package telegraf for versions less than 1.31.0-25. A patched version of the package is available...
CVE-2026-48145 affecting package thrift for versions less than 0.24.0-1
CVE-2026-48145 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2026-64607
HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the async i/o...