1436792 matches found
cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist
cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist...
Security update for gitea-tea (important)
openSUSE security update: security update for gitea-tea ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21603-1 Rating: important References: bsc1234598 bsc1235367 bsc1239493 bsc1241819 bsc1251471 bsc1251663 bsc1253576 Cross-References: CVE-2024-453...
MiracleLinux 8 : dotnet10.0-10.0.111-1.el8_10 (AXSA:2026-1582:17)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1582:17 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...
Photon OS 5.0: Cassandra PHSA-2026-5.0-91-0958
An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0958. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-78928
Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description A stored cross-site scripting issue exists in the Form node completion page. The system only applied its sandboxing Content-Security-Policy a...
Generation of Predictable IV with CBC Mode
Overview org.springframework.security:spring-security-crypto is a spring-security-crypto library for Spring Security. Affected versions of this package are vulnerable to Generation of Predictable IV with CBC Mode via AesBytesEncryptor when using the two-argument constructor or specifying a null I...
cve-2026-47889 - MEDIUM - Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse
cve-2026-47889 - MEDIUM - Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse...
UBUNTU-CVE-2026-17183
An authenticated user with permission to create or edit alert rules ca...
Comparison of Object References Instead of Object Contents
Overview Affected versions of this package are vulnerable to Comparison of Object References Instead of Object Contents in the process of comparing UserVerificationRequirement during WebAuthn authentication, when using distributed HTTP session stores. An attacker can bypass user verification by...
Binding to an Unrestricted IP Address
Overview org.springframework.security:spring-security-ldap is a package that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Binding to an...
Virtuozzo Infrastructure 7.3 Update 1 Hotfix 3 (7.3.1-66)
This update provides security fixes. Vulnerability id: VSTOR-140619 A security fix for CVE-2026-64531. Vulnerability id: VSTOR-140678 A security fix for CVE-2026-64561...
PT-2026-79240
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can bypass security restrictions because the system does not properly limit pathnames to restricted directories. Recommendations At the moment, there is no...
java-17-openjdk security update
17.0.20.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.1.1-1.1 - Update to jdk-17.0.20.1+1 GA - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - This tarball is embargoed until 2026-08-18 @ 1p...
java-21-openjdk security update
1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625 1:21.0.12.1.1-1.1 - Update to jdk-21.0.12.1+1 GA - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - This...
java-25-openjdk security update
1:25.0.4.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.1.1-1.1 - Update to jdk-25.0.4.1+1 GA - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2026-08-18 @ 1p...
java-1.8.0-openjdk security update
1.8.0.504.b01-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.504.b01-1.1 - Update to 8u504-b01 GA. - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - This tarball is embargoe...
cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting XSS...
cve-2026-47884 - MEDIUM - Spring Framework Improper Path Limitation in XsltView
cve-2026-47884 - MEDIUM - Spring Framework Improper Path Limitation in XsltView...