CVE-2026-42046

creationtimestamp| type| source ---|---|--- 2026-05-25 13:40:12+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mmom4bm7c32p...

SUSE SLED15 / SLES15 Security Update : postgresql18 (SUSE-SU-2026:1944-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1944-1 advisory. This update for postgresql18 fixes the following issues Update to version 18.4. Security issues: -...

SUSE-SU-2026:1942-1 Security update for postgresql16

This update for postgresql16 fixes the following issues Update to version 16.13. Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard again...

listmonk 代码问题漏洞

ListMonk is a high-performance, self-hosted newsletter and mailing list manager developed by Kailash Nadh. Versions of ListMonk prior to 6.1.0 contained code vulnerabilities due to session management issues. These vulnerabilities allowed previously issued authenticated sessions to remain valid...

GHSA-7CQ3-MHXQ-W946

creationtimestamp| type| source ---|---|--- 2026-01-17 12:45:03+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcmndtqqbw2s...

CVE-2025-11677

creationtimestamp| type| source ---|---|--- 2025-11-02 11:32:23+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m4nftvzd3u2z 2025-11-10 20:37:37+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m5ci27wgej2z...

CVE-2025-64386 HIJACKING OF THE TOKEN AND GAINING ACCESS

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...

CVE-2025-59800

creationtimestamp| type| source ---|---|--- 2025-10-22 21:32:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m3ssbbtafa2q 2026-01-28 12:05:17+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdiaarqtys2s...

CVE-2025-53786

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identifi...

GHSA-F946-J5J2-4W5M

creationtimestamp| type| source ---|---|--- 2025-07-02 14:36:58+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsygsqtgiy2f 2025-07-03 00:05:08+00:00| seen| https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3lszgkpezi726...

CVE-2025-3415

creationtimestamp| type| source ---|---|--- 2025-06-13 10:38:04+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lriam2o24q2c 2025-06-13 10:38:05+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lriam2wsu42t 2025-06-13 12:05:56+00:00| seen|...

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

CVE-2025-31163

creationtimestamp| type| source ---|---|--- 2025-03-28 18:28:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9414 2025-03-28 20:15:54+00:00| seen| https://t.me/cvedetector/21453 2025-07-05 09:03:26+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lt7fl46kbz2f...

CVE-2025-30205

creationtimestamp| type| source ---|---|--- 2025-03-24 20:34:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5m6i26n52x 2025-03-24 20:54:48+00:00| seen| https://t.me/cvedetector/20987 2025-03-24 22:40:28+00:00| seen|...

May 23, 2023-KB5026958 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

May 23, 2023-KB5026958 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 Release Date: May 23, 2023 Version: .NET Framework 3.5, 4.8 and 4.8.1 Summary This article describes the Cumulative Update for 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2. Securit...

Twitter and two-factor authentication: What's changing?

Twitter is making some dramatic shake ups to its currently available security settings. From March 19, users of Twitter wont be able to use SMS-based two-factor authentication 2FA unless they have a subscription to the paid Twitter Blue service. If you use text-based 2FA, the important thing here...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2019:2048-1)

This update for mariadb fixes the following issues : Update to MariaDB 10.0.38 GA bsc1136037. Security issues fixed : CVE-2019-2537: Denial of service via multiple protocols bsc1136037 CVE-2019-2529: Denial of service via multiple protocols bsc1136037 CVE-2018-3282: Server Storage Engines...

SUSE-SU-2019:2048-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to MariaDB 10.0.38 GA bsc1136037. Security issues fixed: - CVE-2019-2537: Denial of service via multiple protocols bsc1136037 - CVE-2019-2529: Denial of service via multiple protocols bsc1136037 - CVE-2018-3282: Server Storage Engines...

Unspecified Vulnerability in ECOS System Management Appliance

ECOS System Management Appliance a.k.a. SMA is a virtual appliance from ECOS TECHNOLOGY, Germany, for centralized management of ECOS products, which is capable of running on VMware, Crtrix XenServer, and Hyper-V. A security vulnerability exists in ECOS SMA version 5.2.68 that stems from an...

openSUSE Security Update : go1.9 (openSUSE-2018-672)

This update for go1.9 fixes the following issues : Security issues fixed : - CVE-2018-7187: arbitrary command execution via VCS path boo1081495 Non-security changes : - Update to version 1.9.7 - fixes to the go command and compiler - minimal support to the go command for the vgo transition...