264146 matches found
wayland security, bug fix, and enhancement update
An update is available for wayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Wayland is a protocol for a compositor to talk to its clients, as well as a C...
RLSA-2023:2786 Moderate: wayland security, bug fix, and enhancement update
Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...
EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2475)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...
PT-2026-53037
HCL Traveler for Microsoft Outlook HTMO is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2515)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...
python311-pypdf-6.14.0-1.1 on GA media (moderate)
python311-pypdf-6.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11113-1 Rating: moderate Cross-References: CVE-2026-54651 CVSS scores: CVE-2026-54651 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-54651 SUSE : 6.7...
Apache Kerby Kerberos Pre-authentication Bypass Vulnerability
Apache Kerby is a Java implementation of the Kerberos protocol, primarily used for providing authentication and authorization services. Apache Kerby has a vulnerability related to bypassing Kerberos pre-authentication. This vulnerability arises when users send PA-DATA that includes unrecognized o...
EulerOS 2.0 SP15 : pyOpenSSL (EulerOS-SA-2026-2499)
According to the versions of the pyOpenSSL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback t...
EUVD-2026-39484
pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes...
EUVD-2026-38067
Subsonic API: any authenticated user can delete or read any other user's playlist IDOR...
CVE-2026-52780
creationtimestamp| type| source ---|---|--- 2026-06-26 23:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa42cxqt52c 2026-06-28 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenvjmkmg2v...
CVE-2026-52783
creationtimestamp| type| source ---|---|--- 2026-06-26 23:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3tm22wn2s 2026-06-28 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7ufns52x 2026-06-29 14:45:10+00:00| seen|...
EUVD-2026-39483
pnpm: Repository-controlled configDependencies can select a pacquet native install engine...
NPM: pnpm: Repository config can expand victim environment secrets into registry requests before scripts run
NPM: pnpm: Repository config can expand victim environment secrets into registry requests before scripts run vulnerability discovered by ? in WordPress Npm pnpm versions 10.34.2...
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
An crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder...
GHSA-9RC6-8CJV-RCVX Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection
Description The getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request's Host header with a fixed path, with zero validation of the Host header: go func getRedirectURLc gin.Context string scheme := "http://" referer := c.Request.Referer if...
pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)
Summary pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or delete arbitrary files on the filesystem during pn...
GHSA-RXHJ-4M44-96R4 pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)
Summary pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or delete arbitrary files on the filesystem during pn...
CVE-2026-33560 Daktronics Controller Firmware Unrestricted Upload of File with Dangerous Type
The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which allows authenticated users to upload files of any type without validation. No file extension filtering or content inspection is enforced which allows executable binaries and...