Lucene search
+L

9557 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 7:58 p.m.10 views

OpenClaw vulnerable to sensitive file disclosure via stageSandboxMedia

Summary When iMessage remote attachment fetching is enabled channels.imessage.remoteHost, stageSandboxMedia accepted arbitrary absolute paths and used SCP to copy them into local staging. If a non-attachment path reaches this flow, files outside expected iMessage attachment directories on the...

8.2CVSS6AI score0.00344EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.9 views

PT-2026-26411

Summary When iMessage remote attachment fetching is enabled channels.imessage.remoteHost, stageSandboxMedia accepted arbitrary absolute paths and used SCP to copy them into local staging. If a non-attachment path reaches this flow, files outside expected iMessage attachment directories on the...

8.7CVSS5.9AI score0.00344EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/03/03 12:0 a.m.4 views

RockyLinux 9 : podman (RLSA-2026:3337)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:3337 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 golang: archive/zip: Excessive CPU...

10CVSS6AI score0.01945EPSS
SaveExploits4References9
OpenVAS
OpenVAS
added 2026/03/03 12:0 a.m.10 views

Ubuntu: Security Advisory (USN-5376-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.4 views

Slackware: Security Advisory (SSA:2026-059-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.74513EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.2 views

openSUSE Security Advisory (SUSE-SU-2026:0643-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.5 views

Fedora: Security Advisory (FEDORA-2026-a48b5f36ec)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.1AI score0.2202EPSS
SaveExploits13References4
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.4 views

SUSE: Security Advisory (SUSE-SU-2026:0645-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS5.9AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.2 views

SUSE: Security Advisory (SUSE-SU-2026:0690-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.1AI score0.00821EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.7 views

SUSE: Security Advisory (SUSE-SU-2026:0688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.2AI score0.00811EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2026:0644-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2026:0664-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/03/02 12:0 a.m.6 views

openSUSE Security Advisory (SUSE-SU-2026:0664-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/02/27 12:0 a.m.3 views

openSUSE Security Advisory (SUSE-SU-2026:0635-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.9CVSS7.2AI score0.02667EPSS
SaveExploits0References6
Fedora
Fedora
added 2026/02/26 12:56 a.m.10 views

[SECURITY] Fedora 42 Update: munge-0.5.18-1.fc42

MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having...

7.8CVSS6AI score0.00302EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2026/02/26 12:0 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2026:0612-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS5.4AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/02/26 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2026:0613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS5.4AI score0.0055EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2026/02/26 12:0 a.m.4 views

SUSE: Security Advisory (SUSE-SU-2026:0603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.4AI score0.00264EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2026/02/26 12:0 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2026:0615-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS5.4AI score0.01208EPSS
SaveExploits3References7
OpenVAS
OpenVAS
added 2026/02/25 12:0 a.m.4 views

Ubuntu: Security Advisory (USN-8059-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.37115EPSS
SaveExploits2References2
Rows per page
Query Builder