1494110 matches found
Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities
Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel...
Atlassian Confluence Download Attachments - Remote Code Execution
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...
Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting
Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...
Oracle WebLogic Server - Remote Command Execution
The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent - WLS Security is susceptible to remote command execution. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. This easily exploitable vulnerability allows unauthenticated attacke...
Adobe ColdFusion - Arbitrary File Read
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...
CLEANSTART-2026-PF01385 Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh
CVE-2026-39831 affects multiple packages. The Verify method for FIDO/U2F security key types sk-ecdsa-sha2-nistp256@openssh. See references for individual vulnerability details...
CLEANSTART-2026-LB27311 On Unix platforms, when listing the contents of a directory using File
Security vulnerability affects the external-dns package. On Unix platforms, when listing the contents of a directory using File...
CLEANSTART-2026-LL10619 On Linux, if the target of Root
Security vulnerability affects the external-dns package. On Linux, if the target of Root...
CLEANSTART-2026-ZN41930 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...
CLEANSTART-2026-TR55390 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...
CLEANSTART-2026-TR78672 Security fix for GHSA-g57g-f23g-4646 applied in: langfuse 4.35.0-r1
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UX56548 Security fix for GHSA-v53p-9fqp-m79j applied in: langfuse 4.35.0-r1
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-VD48874 Nodemailer before 10
Security vulnerability affects the langfuse package. Nodemailer before 10...
CLEANSTART-2026-GE40690 Nodemailer versions 9
Security vulnerability affects the langfuse package. Nodemailer versions 9...
CLEANSTART-2026-HY02778 Security fix for GHSA-vcvr-r3jv-pc5j applied in: langfuse 4.35.0-r1
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YV14611 vulnerability occurs when a client sends HTTP/1
Security vulnerability affects the elasticsearch package. The vulnerability occurs when a client sends HTTP/1...
CLEANSTART-2026-LU90605 Security fix for GHSA-6v2p-p543-phr9 applied in: stakater-reloader 1.1.0-r9
Security vulnerability affects the stakater-reloader package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UF96774 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the kafka package. yawkat LZ4 Java provides LZ4 compression for Java...