Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

Jira - Incorrect Authorization

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...

Yaws 1.91 - Local File Inclusion

Yaws 1.91 allows unauthenticated local file inclusion via /%5C../ submitted to port 8080. id: CVE-2017-10974 info: name: Yaws 1.91 - Local File Inclusion author: 0xAkoko severity: high description: Yaws 1.91 allows unauthenticated local file inclusion via /%5C../ submitted to port 8080. impact: |...

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Jorani 1.0.0 - Remote Code Execution

Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server. id: CVE-2023-26469 info: name: Jorani 1.0.0 - Remote Code Execution author: pussycat0x severity: critical description: | Jorani 1.0.0, an attacker could leverage path traversal to access files...

MINI-HVG2-GGRQ-HQJ2

Bulletin has no description...

OPENSUSE-SU-2026:11517-1 go1.26-1.26.6-1.1 on GA media

These are all security issues fixed in the go1.26-1.26.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11525-1 rustup-1.29.0~0-1.1 on GA media

These are all security issues fixed in the rustup-1.29.00-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1786731948 TuxCare security update for dompurify (33 CVEs)

TuxCare rebuilt dompurify to address 33 CVEs. Fixed in 3.0.3-tuxcare.1...

CLSA-2026-1786731853 TuxCare security update for dompurify (10 CVEs)

TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.2.3-tuxcare.3...

ROOT-APP-PYPI-CVE-2026-27026 CVE-2026-27026 in pypdf - Patched by Root

Root has patched CVE-2026-27026 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41672 CVE-2026-41672 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-41672 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root

Root has patched CVE-2026-50219 in the expat package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-28757 CVE-2024-28757 in expat - Patched by Root

Root has patched CVE-2024-28757 in the expat package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-24515 CVE-2026-24515 in expat - Patched by Root

Root has patched CVE-2026-24515 in the expat package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-25210 CVE-2026-25210 in expat - Patched by Root

Root has patched CVE-2026-25210 in the expat package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-56408 CVE-2026-56408 in expat - Patched by Root

Root has patched CVE-2026-56408 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root

Root has patched CVE-2026-50219 in the expat package for Root:Debian:12. Multiple fixed versions available...