200596 matches found
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
tshirtecommerce PrestaShop Module - SQL Injection
The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...
Magento - SQL Injection
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...
[SECURITY] Fedora 43 Update: srt-1.5.7-1.fc43
Secure Reliable Transport SRT is an open source transport technology that optimizes streaming performance across unpredictable networks, such as the Internet...
[SECURITY] Fedora 44 Update: mingw-expat-2.8.4-1.fc44
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
[SECURITY] Fedora 44 Update: nagios-plugins-2.5-2.fc44
Nagios is a program that will monitor hosts and services on your network, and to email or page you when a problem arises or is resolved. Nagios runs on a Unix server as a background or daemon process, intermittently running checks on various services that you specify. The actual service checks ar...
CLSA-2026-1789166016 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.7-tuxcare.9...
CVE-2020-0601
CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...
[SECURITY] Fedora 45 Update: kernel-headers-7.2.4-300.fc45
Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...
[SECURITY] Fedora 45 Update: python-asteval-1.0.10-1.fc45
ASTEVAL is a safeish evaluator of Python expressions and statements, using Python's ast module. The idea is to provide a simple, safe, and robust miniature mathematical language that can handle user-input. The emphasis here is on mathematical expressions, and so many functions from numpy are...
[SECURITY] Fedora 45 Update: darktable-5.6.1-2.fc45
darktable manages your camera raw files and images in a database, lets you view them through lighttable mode and develop/enhance them in darkroom mode...
[SECURITY] Fedora 45 Update: composer-2.10.3-1.fc45
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
CLSA-2026-1789150088 TuxCare security update for org.springframework.graphql (6 CVEs)
TuxCare rebuilt 2 org.springframework.graphql packages to address 6 CVEs. Fixed in 1.3.7-tuxcare.4...
RLSA-2026:66355 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
RLSA-2026:66542 Important: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
ROOT-OS-DEBIAN-12-CVE-2026-32814 CVE-2026-32814 in libheif - Patched by Root
Root has patched CVE-2026-32814 in the libheif package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1789122433 TuxCare security update for django (4 CVEs)
TuxCare rebuilt django to address 4 CVEs. Fixed in 4.0.post18+tuxcare...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...