kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

CLEANSTART-2024-TY50234 Use after free in Safe Browsing in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Safe Browsing in Google Chrome prior to 98...

CLEANSTART-2024-JO49927 Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102

Security vulnerability affects the chromium package. Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102...

Rocky Linux 9 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource / etc Multiple Vulnerabilities (crlsa-2025_7050)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257050 advisory. rsync: Path traversal vulnerability in rsync CVE-2024-12087 rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 rsync: Race Condition ...

PT-2026-105859

Impact What kind of vulnerability is it? Who is impacted? It has two related instances that share the same root cause: a user-controlled model field is assigned verbatim to a form field's help text, which is rendered with Django's |safe filter render field.html, bypassing auto-escaping. In both...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2025:1752247531)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752247531 advisory. - A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destination sen...

CentOS Linux 6 [TuxCare] Security Update: rsync (CENTOS6:CLSA-2025:1751134987)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1751134987 advisory. - A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destination sent fr...

CentOS Linux 7 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS7:CLSA-2025:1738852614)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1738852614 advisory. - A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destinatio...

CVE-2026-94672

Contributor Insecure Direct Object References IDOR in Safe SVG = 2.5.0 versions...

CVE-2026-94077

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-94672 WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Safe SVG = 2.5.0 versions...

CVE-2026-94672 WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Safe SVG = 2.5.0 versions...

EUVD-2026-89846

Contributor Insecure Direct Object References IDOR in Safe SVG = 2.5.0 versions...

CVE-2026-94672

The Safe SVG WordPress plugin (versions

CVE-2026-94077 WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-94077 WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

EUVD-2026-89832

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-94077

The Safe SVG WordPress plugin, versions

CVE-2026-88791

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...

EUVD-2026-89613

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...