205404 matches found
CLSA-2026-1792692686 TuxCare security update for 39 packages (15 CVEs)
TuxCare rebuilt 39 packages to address 15 CVEs. Fixed in 10.1.16-tuxcare.1...
CLSA-2026-1792687381 TuxCare security update for 36 packages (4 CVEs)
TuxCare rebuilt 36 packages to address 4 CVEs. Fixed in 7.0.109-tuxcare.5...
CLSA-2026-1792686740 TuxCare security update for 38 packages (6 CVEs)
TuxCare rebuilt 38 packages to address 6 CVEs. Fixed in 9.0.39-tuxcare.1...
CVE-2026-41940-Security-Patch
CVE-2026-41940-Security-Patch Unofficial temporary patch for the CVE-2026-41940 vulnerability Can be used for temporary defense Please upgrade to the official release as soon as conditions permit cPanel Security Announcement:...
CLSA-2026-1792686134 TuxCare security update for 33 packages (9 CVEs)
TuxCare rebuilt 33 packages to address 9 CVEs. Fixed in 9.0.13-tuxcare.1...
ROOT-APP-PYPI-CVE-2026-59204 CVE-2026-59204 in pillow - Patched by Root
Root has patched CVE-2026-59204 in the pillow package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1792667085 TuxCare security update for 36 packages (24 CVEs)
TuxCare rebuilt 36 packages to address 24 CVEs. Fixed in 8.5.46-tuxcare.1...
CLSA-2026-1792666002 TuxCare security update for 40 packages (17 CVEs)
TuxCare rebuilt 40 packages to address 17 CVEs. Fixed in 10.1.33-tuxcare.1...
CLSA-2026-1792652081 TuxCare security update for pillow (10 CVEs)
TuxCare rebuilt pillow to address 10 CVEs. Fixed in 11.3.0.post8+tuxcare...
study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095
Investigation Report on Struts2 Vulnerabilities S2-054, S2-055 and Jackson Vulnerability CVE-2017-7525, CVE-2017-15095 We have published a summarized article that condenses the key points for easier reading. Recommended for those who want to get an overview first or don't have much time. SSTtechl...
tshirtecommerce PrestaShop Module - SQL Injection
The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
Magento - SQL Injection
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...
CLSA-2026-1792617972 TuxCare security update for vitest (1 CVE)
TuxCare rebuilt vitest to address 1 CVE. Fixed in 3.2.7-tuxcare.2...
CLSA-2026-1792602316 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.37-tuxcare.13...
CLSA-2026-1792601132 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.33-tuxcare.3...
CLSA-2026-1792599360 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 4 CVEs. Fixed in 6.1.18-tuxcare.2...