23789 matches found
PT-2026-34030
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, when APP SHOW ONLY ASSIGNED CONVERSATIONS is enabled, direct conversation view correctly blocks users who are neither the assignee nor the creator. The save draft AJAX path is weaker. A direct POST can create ...
PT-2026-33879
Name of the Vulnerable Software and Affected Versions nbconvert versions 6.5 through 7.17.0 Description The nbconvert tool converts Jupyter notebooks to various formats using Jinja templates. When the HTMLExporter.embed images variable is set to True, the markdown renderer allows arbitrary file...
PT-2026-34202
Name of the Vulnerable Software and Affected Versions WWBN AVideo versions 29.0 and earlier Description The allowOrigin$allowAll=true function in objects/functions.php reflects any arbitrary Origin header back in Access-Control-Allow-Origin along with Access-Control-Allow-Credentials: true. This...
PT-2026-34036
blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the password change form at /profile/slug/edit/ does not include a current password field and does not verify the user's existing password before accepting a new one. Any attacker who obtains a valid authenticated session —...
PT-2026-34206
Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to 29.1 Description An issue exists where the isValidDuration function at 'objects/video.php:918' uses a regular expression /^0-91,2:0-91,2:0-91,2/ that lacks a $ end anchor. This allows arbitrary HTML or JavaScript ...
PT-2026-34057
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the mailcow web interface passes the raw $ SERVER'REQUEST URI' to Twig as a global template variable and renders it inside a JavaScript string literal in the setLang helper of base.twig,...
PT-2026-37377
Name of the Vulnerable Software and Affected Versions gnutls versions prior to 3.8.13-1.1 Description Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key incorrectly match usernames containing a NUL character with truncated usernames. A remote attacker can exploit this by sendi...
python311-PyPDF2-2.11.1-9.1 on GA media (moderate)
python311-PyPDF2-2.11.1-9.1 on GA media Announcement ID: openSUSE-SU-2026:10582-1 Rating: moderate Cross-References: CVE-2026-40260 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
SUSE-SU-2026:1502-1 Security update for python312
This update for python312 fixes the following issues: - CVE-2026-3446: Base64 decoding stops at first padded quad by default bsc1261970...
CVE-2026-25058
CVE-2026-25058 affects Vexa. The transcription-collector exposes an unauthenticated internal endpoint GET /internal/transcripts/{meeting_id}, allowing enumeration of meeting IDs and access to any user’s transcripts without authentication. Root cause: missing auth checks on the internal transcript...
CLSA-2026-1776698705 graphviz: Fix of CVE-2023-46045
CVE-2023-46045: fix out-of-bounds read via crafted config6a file...
CLSA-2026-1776693102 file: Fix of CVE-2019-18218
CVE-2019-18218: fix heap-based buffer overflow in cdfreadpropertyinfo...
CLSA-2026-1776681849 libsoup: Fix of CVE-2026-5119
CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnelconnect CONNECT request for HTTPS targets...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
giflib security update
5.1.4-4 - fix CVE-2026-23868: double free in GifMakeSavedImage RHEL-154853...
ALSA-2026:8840 Important: go-rpm-macros security update
This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url...
[slackware-security] tigervnc
New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/tigervnc/tigervnc-1.16.2-i586-2slack15.0.txz: Rebuilt. Rebuilt against xorg-server-1.20.14 patched to fix security issues: XKB Integer Underflo...
chromedriver-147.0.7727.101-1.1 on GA media (moderate)
chromedriver-147.0.7727.101-1.1 on GA media Announcement ID: openSUSE-SU-2026:10572-1 Rating: moderate Cross-References: CVE-2026-6296 CVE-2026-6297 CVE-2026-6298 CVE-2026-6299 CVE-2026-6300 CVE-2026-6301 CVE-2026-6302 CVE-2026-6303 CVE-2026-6304 CVE-2026-6305 CVE-2026-6306 CVE-2026-6307...