26311 matches found
CLEANSTART-2026-ER93728 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-NY12442 node-tar is a full-featured Tar for Node
Multiple security vulnerabilities affect the npm package. node-tar is a full-featured Tar for Node. See references for individual vulnerability details...
📄 WordPress RFC 6.0.8 Security Scanner
WordPress RFC plugin version 6.0.8 security scanner that detects and attempts remote shell upload. ============================================================================================================================================= | Title : WordPress RFC Plugin 6.0.8 Security Scanner | ...
EV2GO 安全漏洞
EV2GO is a electric vehicle charging facility management platform operated by the Russian company EV2GO. EV2GO has security vulnerabilities; these vulnerabilities stem from the lack of a limit on the number of authentication requests. This could allow attackers to carry out denial-of-service...
Copeland多款产品 安全漏洞
Copeland XWEB PRO, among others, are advanced commercial and industrial refrigeration monitoring and management systems developed by the American company Copeland. Several Copeland products have security vulnerabilities; these vulnerabilities stem from unexpected return values of authentication...
CleverTap Web SDK 安全漏洞
The CleverTap Web SDK is an open-source developer toolkit developed by CleverTap. The CleverTap Web SDK versions 1.15.2 and earlier contain security vulnerabilities. These vulnerabilities stem from the insufficient source verification in the handleCustomHtmlPreviewPostMessageEvent function within...
Statamic 安全漏洞
Statamic is a powerful flat-file CMS built using Laravel by Statamic Inc. It allows all content, templates, assets, and settings to be stored in files rather than in a database. There were security vulnerabilities in versions prior to Statamic 5.73.11 and 6.4.0, which stemmed from the data endpoi...
seerr 安全漏洞
Seerr is an open-source media request and discovery manager developed by the Seerr Team. Versions of Seerr prior to 3.1.0 contained security vulnerabilities. These vulnerabilities stemmed from the GET /api/v1/user/:id endpoint, which would return a complete set of configuration objects to any...
Kiteworks 代码问题漏洞
Kiteworks is a security private network data software developed by Kiteworks Corporation in the United States. Versions of Kiteworks prior to 9.2.0 contained code-related vulnerabilities. These vulnerabilities stemmed from defects in the configuration functionality, which could allow the upload o...
SODOLA SL902-SWTGW124AS 安全特征问题漏洞
SODOLA SL902-SWTGW124AS is an industrial switch produced by the Spanish company SODOLA. Versions of SODOLA SL902-SWTGW124AS prior to 200.1.20 had security feature vulnerabilities. These vulnerabilities stemmed from a weak session identifier generation mechanism, which could allow attackers to...
PSI Probe 安全漏洞
PSI Probe is an open-source monitoring and management tool for Tomcat developed by Psi-Probe. PSI Probe versions 5.3.0 and earlier contained security vulnerabilities. These vulnerabilities were due to a function in the file...
[SECURITY] [DSA 6150-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6150-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 26, 2026 https://www.debian.org/security/faq -...
podman security update
An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...
RLSA-2026:3339 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bugs fixed in Firef...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ec2, docker, k9s, kubevela, vcluster, grype, flux-helm-controller, crossplane-provider-azure-storage, gptscript, flux-notification-controller, terragrunt, crossplane-provider-aws-sns, gitea, rclone, grafana-alloy, aactl, sops, witness,...
USN-8059-6: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...
USN-8059-6 linux-aws, linux-aws-6.8, linux-ibm, linux-ibm-6.8, linux-xilinx vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...
CODESYS in Festo Automation Suite
SUMMARY Starting with Festo Automation Suite FAS version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to...
