313568 matches found
Moderate: Red Hat Security Advisory: java-17-openjdk security update
An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Advanced Mission...
OpenJDK: Enhance TLS server (2026-08 Security Update)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...
EUVD-2026-63088
Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and radio fetch paths perform a point-in-time App\Helpers\Network::isPublicHost or isSafeUrl check without pinning the validated address, and most paths lack redirect-hop validation and do not revalidate every...
EUVD-2026-63085
Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible createInternetRadioStation.view and updateInternetRadioStation.view routes accept an authenticated user's streamUrl without the SafeUrl and HasAudioContentType checks used by the regular radio API...
CVE-2026-68555 coturn: Chained mobility resumes allow authenticated remote memory exhaustion
Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...
CVE-2026-68555
Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...
CVE-2026-53957
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:15+00:00| published-proof-of-concept| https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx...
CVE-2026-54689
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:08+00:00| published-proof-of-concept| https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-wppf-h75h-6pm6...
CVE-2026-53549 Termix: Server-Side Request Forgery via Proxy Connectivity Test
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...
EUVD-2026-62855
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: logstash, conductor, nuxeo, cassandra-reaper, thingsboard, logstash-fips, zipkin, conductor-fips, traccar, druid, traccar-fips...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: logstash, conductor, nuxeo, cassandra-reaper, thingsboard, logstash-fips, zipkin, conductor-fips, druid...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: logstash, conductor, nuxeo, cassandra-reaper, thingsboard, logstash-fips, zipkin, conductor-fips, traccar, druid, traccar-fips...
GHSA-6G32-PXV4-2WFJ vulnerabilities
Vulnerabilities for packages: logstash, conductor, nuxeo, cassandra-reaper, thingsboard, logstash-fips, zipkin, conductor-fips, traccar, druid, traccar-fips...
CVE-2026-69219 vulnerabilities
Vulnerabilities for packages: logstash, conductor, nuxeo, cassandra-reaper, thingsboard, logstash-fips, zipkin, conductor-fips, traccar, druid, traccar-fips...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: logstash, conductor, nuxeo, cassandra-reaper, thingsboard, logstash-fips, zipkin, conductor-fips, traccar, druid, traccar-fips...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, cassandra-reaper, druid...