Search Guard FLX 安全漏洞

Search Guard FLX is an encryption, authentication, and authorization system developed by the German company Search Guard. Versions 1.0.0 to 4.0.1 of Search Guard FLX contain security vulnerabilities, as the audit log function may record credentials of users who log in to Kibana...

MCP Java SDK 安全漏洞

The MCP Java SDK is an open-source standard protocol SDK for integrating AI models and tools with Java applications, developed under the Model Context Protocol. Versions of the MCP Java SDK prior to 1.0.1 and 1.1.1 contained security vulnerabilities, which were caused by hardcoded wildcard CORS...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.28 contained security vulnerabilities. These vulnerabilities stemmed from the failure to disconnect active WebSocket sessions when removing devices or tokens, allowing attackers...

Checkmk 安全漏洞

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions of Checkmk prior to 2.5.0b2 contained security vulnerabilities. These vulnerabilities were due to a storage-side cross-site scripting issue, which could allow authenticated users to execute arbitrary JavaScript when...

Pega Platform 安全漏洞

Pega Platform is an enterprise management platform developed by Pega, Inc. Versions of Pega Platform from 8.1.0 to 25.1.0 have security vulnerabilities. These vulnerabilities stem from cross-site scripting vulnerabilities in the user interface components, which may compromise confidentiality...

OpenText Operations Agent 安全漏洞

OpenText Operations Agent is a software developed by OpenText Corporation in Canada, used for managing and monitoring OpenText products and solutions. Versions of OpenText Operations Agent prior to 12.29 contained security vulnerabilities. These vulnerabilities stemmed from the possibility of...

Fedora 42 : firefox / nss (2026-49237e1ced)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-49237e1ced advisory. Update NSS to 3.121.0 Update to Firefox 149.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2920 GStreamer:...

incus-6.23-1.1 on GA media (moderate)

incus-6.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:10450-1 Rating: moderate Cross-References: CVE-2026-33542 CVE-2026-33711 CVE-2026-33743 CVE-2026-33897 CVE-2026-33898 CVE-2026-33945 CVSS scores: CVE-2026-33542 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N CVE-2026-33897 SUSE...

MozillaThunderbird-140.9.0-1.1 on GA media (moderate)

MozillaThunderbird-140.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10447-1 Rating: moderate Cross-References: CVE-2025-59375 CVE-2026-3889 CVE-2026-4371 CVE-2026-4684 CVE-2026-4685 CVE-2026-4686 CVE-2026-4687 CVE-2026-4688 CVE-2026-4689 CVE-2026-4690 CVE-2026-4691 CVE-2026-4692...

scitokens 安全漏洞

Scitokens is an open-source science computing token library developed by SciTokens. Versions of Scitokens prior to 1.4.1 contained security vulnerabilities. These vulnerabilities stemmed from the library’s practice of normalizing path components within tokens before authorization, which could lea...

SiYuan 安全漏洞

SiYuan is a privacy-oriented personal knowledge management system developed by SiYuan itself. Versions of SiYuan prior to 3.6.2 contained security vulnerabilities. These vulnerabilities were caused by overly lax CORS policies, which could lead to remote code execution...

Moby 安全漏洞

Moby is an open-source project developed by Moby. It aims to promote the containerization of software and help the ecosystem make container technology mainstream. Versions of Moby prior to 29.3.1 contained security vulnerabilities, which were due to allowing attackers to bypass authorized plugins...

GHSA-442J-39WM-28R2 vulnerabilities

Vulnerabilities for packages: lerna, opensearch-dashboards, nextcloud-server, ts-patch, py3-jupyterlab, rancher-api-ui, prism...

GHSA-XHPV-HC6G-R9C6 vulnerabilities

Vulnerabilities for packages: lerna, opensearch-dashboards, nextcloud-server, ts-patch, py3-jupyterlab, rancher-api-ui, prism...

GHSA-2MXC-FM8X-QGCP vulnerabilities

Vulnerabilities for packages: ghostscript...

FreeRDP 安全漏洞

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.24.2 contained security vulnerabilities. These vulnerabilities stemmed from rendering pixel data in adjacent heap memory onto the screen, potentially exposing sensitive data to...

Yokogawa CENTUM VP 安全漏洞

Yokogawa CENTUM VP is a distributed control system platform developed by Yokogawa Electric Corporation in Japan. There are security vulnerabilities in Yokogawa CENTUM VP, which stem from hardcoded passwords. This could allow attackers to log in as PROG users under certain conditions...

OpenSC 安全漏洞

OpenSC is an open-source smart card tool and middleware developed by OpenSC. Versions of OpenSC prior to 0.27.0 contained security vulnerabilities. These vulnerabilities were caused by stack buffer overflows during the GET RESPONSE process, which could allow attackers with physical access rights ...

Awesome LLM Apps 安全漏洞

Awesome LLM Apps is a collection of large language model applications personally developed by Shubham Saboo. Awesome LLM Apps contains security vulnerabilities, which stem from improper isolation of session-specific environment variables, potentially leading to cross-session information leaks...