1442876 matches found
CLSA-2026-1787928056 TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.1.21-tuxcare.11...
WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability
2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteGround Security versions = 1.6.6...
WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability
Backdoor vulnerability discovered by ashv4ni in WordPress Theme Newspapers X versions 1.0.46-1.0.48...
Chromium: CVE-2026-78953 Missing authorization in SiteIsolation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys)
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys)
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-75159
creationtimestamp| type| source ---|---|--- 2026-08-28 12:45:42+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3...
CVE-2026-54085
creationtimestamp| type| source ---|---|--- 2026-08-28 12:45:35+00:00| seen| https://www.acn.gov.it/portale/w/wazuh-disponibili-poc-per-le-cve-2026-54083-e-cve-2026-61800...
CVE-2026-61783
creationtimestamp| type| source ---|---|--- 2026-08-28 12:45:27+00:00| seen| https://www.acn.gov.it/portale/w/wazuh-disponibili-poc-per-le-cve-2026-54083-e-cve-2026-61800...
CVE-2026-6876
creationtimestamp| type| source ---|---|--- 2026-08-28 12:45:20+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-sanano-molteplici-vulnerabilita-in-servicenow 2026-08-28 18:51:52+00:00| seen| https://infosec.exchange/ap/users/116810780845358081/statuses/117173922729622633...
CLSA-2026-1787920316 TuxCare security update for jquery (9 CVEs)
TuxCare rebuilt jquery to address 9 CVEs. Fixed in 1.4.3-tuxcare.1...
CLSA-2026-1787919833 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.14-tuxcare.6...
DEBIAN-CVE-2026-73209
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...
DEBIAN-CVE-2026-52681
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...
DEBIAN-CVE-2026-40204
None None None No publicly available exploits are known...
DEBIAN-CVE-2026-40019
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation or denial of service for Sieve script management, and repeated connections can consume all available CPU on the...
DEBIAN-CVE-2026-33605
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...
DEBIAN-CVE-2026-33606
Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...