OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

tshirtecommerce PrestaShop Module - SQL Injection

The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

Magento - SQL Injection

An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...

CVE-2026-41940-Security-Patch

CVE-2026-41940-Security-Patch Unofficial temporary patch for the CVE-2026-41940 vulnerability Can be used for temporary defense Please upgrade to the official release as soon as conditions permit cPanel Security Announcement:...

ROOT-APP-MAVEN-CVE-2026-54513 CVE-2026-54513 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54513 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1793275461 TuxCare security update for org.springframework.boot (2 CVEs)

TuxCare rebuilt 4 org.springframework.boot packages to address 2 CVEs. Fixed in 2.7.7-tuxcare.1...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.12 security update

Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Investigation Report on Struts2 Vulnerabilities S2-054, S2-055 and Jackson Vulnerability CVE-2017-7525, CVE-2017-15095 We have published a summarized article that condenses the key points for easier reading. Recommended for those who want to get an overview first or don't have much time. SSTtechl...

Debian dla-4866 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4866 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4866-1 [email protected]...

CLSA-2026-1793209895 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.13.4-tuxcare.2...

CLSA-2026-1793206987 TuxCare security update for org.springframework.cloud (5 CVEs)

TuxCare rebuilt 14 org.springframework.cloud packages to address 5 CVEs. Fixed in 4.3.4-tuxcare.1...

CLSA-2026-1793206618 TuxCare security update for org.springframework.cloud (3 CVEs)

TuxCare rebuilt 2 org.springframework.cloud packages to address 3 CVEs. Fixed in 4.3.4-tuxcare.1...

CLSA-2026-1793204572 TuxCare security update for org.springframework.data (5 CVEs)

TuxCare rebuilt 4 org.springframework.data packages to address 5 CVEs. Fixed in 3.3.5.RELEASE-tuxcare.1...

CVE-2020-0601

CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...

CLSA-2026-1793202493 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 17 org.springframework packages to address 3 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.2...

ROOT-APP-PYPI-CVE-2026-59204 CVE-2026-59204 in pillow - Patched by Root

Root has patched CVE-2026-59204 in the pillow package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1793187929 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 2 org.springframework.data packages to address 1 CVE. Fixed in 3.2.12-tuxcare.5...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

Oracle Linux 10 : libXi (ELSA-2026-91004)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91004 advisory. 1.8.1-7.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054 Tenable has extracted the preceding description block directly fr...