262027 matches found
CLSA-2026-1773706623 TuxCare security update for requirejs (1 CVE)
TuxCare rebuilt requirejs to address 1 CVE. Fixed in 2.1.22-tuxcare.1...
CLSA-2026-1773101686 TuxCare security update for com.fasterxml.woodstox:woodstox-core (1 CVE)
TuxCare rebuilt com.fasterxml.woodstox:woodstox-core to address 1 CVE. Fixed in 5.3.0-tuxcare.1...
CLSA-2026-1772583201 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.1...
CLSA-2026-1770250386 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post4+tuxcare...
CLSA-2026-1770336550 TuxCare security update for org.bouncycastle (1 CVE)
TuxCare rebuilt 16 org.bouncycastle packages to address 1 CVE. Fixed in 1.76-tuxcare.2...
CVE-2026-68494 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...
GHSA-8359-H9FX-J6V9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-WJV6-JCFJ-MF9R vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-VX7X-VCC2-C44G vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-6FHJ-CGMM-XFX6 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
CVE-2026-60007
creationtimestamp| type| source ---|---|--- 2026-08-04 13:30:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i 2026-08-04 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117037480022382500 2026-08-04 14:06:28+00:00| seen|...
CVE-2026-12049
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:19+00:00| seen| https://t.me/cyberoknews/229 2026-08-05 00:00:35+00:00| seen| https://t.me/cyberoknews/229 2026-08-06 00:00:58+00:00| seen| https://t.me/cyberoknews/229...
CVE-2024-33111
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:17+00:00| seen| https://t.me/pentestnotes/50 2026-08-05 00:00:32+00:00| seen| https://t.me/pentestnotes/50 2026-08-06 00:01:01+00:00| published-proof-of-concept| https://t.me/pentestnotes/50...
WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Thrive Architect versions = 10.9.3.1...
CVE-2026-62927
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method...
EEF-CVE-2026-66884 Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection
Summary Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc\plug Oidcc.Plug.AuthorizationCallback module allows an attacker to make a victim's browser complete an authorization flow the victim never initiated. This vulnerability is associated with program file...
Security update for kubevirt
This update for kubevirt fixes the following issues: Security update correcting a CVE over-claim from the previous update, verified by auditing the fix code actually present in the vendored tree: CVE-2026-39821 bsc1266575: the previous entry claimed this fixed by the golang.org/x/net v0.55.0...
