26332 matches found
MiracleLinux 3 : postgresql-8.1.18-2.1.1AXS3 (AXSA:2009-415:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-415:01 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselect...
EUVD-2026-2206
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...
Multi-Vendor BIOS Security Vulnerabilities (January, 2026) - Lenovo Support US
No description provided...
MiracleLinux 7 : firefox-128.13.0-1.0.1.el7.AXS7 (AXSA:2025-10679:27)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10679:27 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035...
MiracleLinux 7 : xorg-x11-server-1.20.4-99.0.1.el7.AXS7 (AXSA:2025-10843:03)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10843:03 advisory. CVE-2025-26594: refuse to free the root cursor and keep its ref CVE-2025-26595: fix buffer overflow in XkbVModMaskText CVE-2025-26596: xkb: fix...
KLA90844 Multiple vulnerabilities in Mozilla Thunderbird ESR
Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. U...
Pixel Update Bulletin—January 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2026-01-05 or later address all issues in this bulletin and all issues in the January 2026 Android...
GHSA-VPFW-47H7-XJ4G vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce...
GHSA-3CHX-G7JG-4263 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
GHSA-JQ6R-JFG5-R4XG vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects IBM® Db2®. (Oct 2025 CPU)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.1.5.26 and earlier, 8.0.8.50 and earlier, and IBM Semeru Version 21.0.8.0 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in October 2025. Vulnerability Details...
GHSA-F256-J965-7F32 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2018-4402
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1...
CVE-2021-41003
Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series...
CVE-2022-23455
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...
CVE-2022-37881
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
CVE-2022-31199
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and...
CVE-2017-18532
The realty plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2019-11999
Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...