197639 matches found
CVE-2026-74939
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
tshirtecommerce PrestaShop Module - SQL Injection
The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
curl security update
An update is available for curl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for...
Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 (CVE-2026-45205)
Summary IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 CVE-2026-45205 Vulnerability Details CVEID:CVE-2026-45205 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration...
ROOT-APP-PYPI-CVE-2026-59204 CVE-2026-59204 in pillow - Patched by Root
Root has patched CVE-2026-59204 in the pillow package for Root:PyPI. Multiple fixed versions available...
RHSA-2026:55450 Red Hat Security Advisory: curl security update
Bulletin has no description...
RHSA-2026:55448 Red Hat Security Advisory: libXfont2 security update
Bulletin has no description...
RHSA-2026:55443 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
RHSA-2026:55447 Red Hat Security Advisory: libXfont2 security update
Bulletin has no description...
RHSA-2026:55441 Red Hat Security Advisory: bind security update
Bulletin has no description...
RHSA-2026:55442 Red Hat Security Advisory: bind9.18 security update
Bulletin has no description...
RHSA-2026:55437 Red Hat Security Advisory: bind security update
Bulletin has no description...
RHSA-2026:55436 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
RHSA-2026:55435 Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update
Bulletin has no description...
RHSA-2026:55432 Red Hat Security Advisory: curl security update
Bulletin has no description...
RHSA-2026:55434 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...