26312 matches found
Gibbon 安全漏洞
Gibbon is a school platform developed by the Gibbon team that addresses practical problems encountered by educators every day. Versions of Gibbon prior to v30.0.01 contained security vulnerabilities. These vulnerabilities were caused by path traversal attacks. When attempting to extract PHP files...
Amazon Linux 2 : java-11-amazon-corretto, --advisory ALAS2-2026-3300 (ALAS-2026-3300)
The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.31+11-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3300 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produc...
GHSA-V2FC-QM4H-8HQV vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, ruby3.4-rails, kube-logging-operator, ruby3.2-rails...
CVE-2026-42586 vulnerabilities
Vulnerabilities for packages: celeborn, thingsboard, trino, druid, tez, management-api-for-apache-cassandra-5.0...
GHSA-WG35-8JPF-2XV3 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, thingsboard...
GHSA-XX64-WWV2-HCQQ vulnerabilities
Vulnerabilities for packages: uv, pixi...
GHSA-WWPQ-F5C3-7HVX vulnerabilities
Vulnerabilities for packages: thingsboard, zipkin, nacos-docker, conductor-fips, camunda-zeebe, kafbat-ui-fips, conductor, kafbat-ui, apache-nifi-registry, keycloak-config-cli, nacos...
GHSA-RGRR-P7GP-5XJ7 vulnerabilities
Vulnerabilities for packages: pinot, seata, trino, thingsboard, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, pinot-fips, apache-hop, tez, management-api-for-apache-cassandra-4.0, druid, celeborn, apache-hop-fips, hadoop-fips...
GHSA-P334-GFHQ-C7W6 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-JP9R-MMHW-VFF3 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-P8XM-42R7-89XG vulnerabilities
Vulnerabilities for packages: wizer, yara-x...
GHSA-JP9R-MMHW-VFF3 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-R67J-R569-JRWP vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
OpenStack Ironic 安全漏洞
OpenStack Ironic is an integrated OpenStack application developed under the OpenStack open source framework. It is used to configure bare machines rather than virtual machines. OpenStack Ironic versions 35.x and earlier contain security vulnerabilities, which stem from the instanceinfokstemplate...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-128-02)
The version of mozilla-thunderbird installed on the remote host is prior to 140.10.2esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-128-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...
PraisonAI 安全漏洞
PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.6.37 and PraisonAIagents prior to 1.6.37 have security vulnerabilities. These vulnerabilities stem from unresolved tool name resolution issues, which may allow attackers to...
kimai 安全漏洞
Kimai is a web-based, multi-user time tracking application developed by Kimai’s individual developers. Versions of Kimai from 2.27.0 to 2.54.0 contained security vulnerabilities. These vulnerabilities stemmed from the possibility for any ROLEUSER to create tags with formula strings as names using...
dataspace-portal 安全漏洞
Dataspace-portal is an open-source data space management portal developed by Sovity. Versions of Dataspace-portal from 2.1.1 to 7.3.2 had security vulnerabilities, which were caused by insufficient authorization for self-registered “PENDING” organization/user accounts...
Security Bulletin: Vulnerabilities found in Java SE affect Rational Business Developer
Summary There are vulnerabilities in Java SE including Oracle January 2026 CPU used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION: Java SE is vulnerable to a denial of service, caused ...
