24889 matches found
PT-2026-7776
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5. An attacker with physical access to a locked device may be able to view sensitive user information...
PT-2026-7768
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.3 watchOS versions prior to 26.3 tvOS versions prior to 26.3 visionOS...
PT-2026-7757
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.4 macOS versions prior to Tahoe 26.3 Description A logging issue allowed an application to potentially access sensitive user data due to insufficient data redaction. Recommendations Update to macOS Sequoia...
PT-2026-7537
Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4 Description A buffer overflow issue exists in Qsync Central. A remote attacker who obtains a user account can potentially exploit this to alter memory or cause processes to crash. Recommendations Update ...
PT-2026-7802
Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.3 macOS versions prior to Sonoma 14.8.4 macOS versions prior to Sequoia 15.7.4 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 iOS versions prior to 26.3 iPadOS versions prior to 26.3 Description A...
go1.25-1.25.7-1.1 on GA media (moderate)
go1.25-1.25.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:10164-1 Rating: moderate Cross-References: CVE-2025-61732 CVSS scores: CVE-2025-61732 SUSE : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2025-61732 SUSE : 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...
PT-2026-7756
Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.3 Description An issue existed with how temporary files were handled, potentially allowing an application to access user-sensitive data. Recommendations Update to macOS Tahoe 26.3...
PT-2026-7664
Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.73.6 Statamic versions prior to 6.2.5 Description Statamic is a Laravel and Git powered CMS designed for building websites. Users without the necessary permissions to view assets are able to download them and view...
keylime-config-7.14.0+0-1.1 on GA media (moderate)
keylime-config-7.14.0+0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10165-1 Rating: moderate Cross-References: CVE-2026-1709 CVSS scores: CVE-2026-1709 SUSE : 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H CVE-2026-1709 SUSE : 8.8...
OPENSUSE-SU-2026:20191-1 Security update for trivy
This update for trivy fixes the following issues: Changes in trivy: - Update to version 0.69.0 bsc1255366, CVE-2025-64702: release: v0.69.0 main 9886 chore: bump trivy-checks to v2 9875 choredeps: bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 10091 fixrepo: return a nil interfa...
CVE-2026-25479
Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, in litestar.middleware.allowedhosts, allowlist entries are compiled into regex patterns in a way that allows regex metacharacters to retain special meaning e.g., . matches any character. This enables a bypass...
CLSA-2026-1770734875 expat: Fix of CVE-2026-24515
CVE-2026-24515: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.21.1 packages and security update
Red Hat OpenShift Container Platform release 4.21.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
CVE-2026-22613
The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton Network M3 which is available on the...
Virtuozzo Hybrid Infrastructure 7.1 Hotfix 3 (7.1.0-193)
This update provides a security fix. Vulnerability id: VSTOR-123590 A security fix for CVE-2025-15467...
Important: pcs security update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: lodash: prototype pollution in .unset and .omit functions CVE-2025-13465 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...
Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 13 (6.0.1-118)
This update provides a security fix. Vulnerability id: VSTOR-123590 A security fix for CVE-2025-15467...
RHEL 8 : nodejs:20 (RHSA-2026:2422)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2422 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
ALSA-2026:2389 Important: brotli security update
Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It...