757 matches found
ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root
Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...
Astra Linux – Vulnerability in qt4-x11, qtbase-opensource-src
A issue was discovered in Qt before version 5.15.15, in versions 6.x before 6.2.9, and in versions 6.3.x through 6.5.x before 6.5.1. When an SVG file with an image inside is rendered, a QTextLayout buffer overflow can occur...
Astra Linux – Vulnerability in libpng1.6
LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Starting from version 1.6.0 until 1.6.51, there was a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread, when processing...
Fedora 43 : abrt (2026-cccf5985b5)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cccf5985b5 advisory. Update to 2.17.9 Resolves: 2484614 Resolves: CVE-2026-54230 Resolves: CVE-2026-54231 Resolves: CVE-2026-54228 Resolves: CVE-2026-54229 Tenable has...
CVE-2026-17656 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-70590 Ghost: Blind Password Hash Disclosure in Ghost Admin API
Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification...
CLSA-2026-1785291220 TuxCare security update for request (1 CVE)
TuxCare rebuilt request to address 1 CVE. Fixed in 2.65.0-tuxcare.1...
Amazon Linux 2023 : python3-tornado (ALAS2023-2026-2016)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2016 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving...
Metasploit Pro 5.1 Released
Today marks the release of Metasploit Pro 5.1 - building upon the foundation laid in 5.0, adding new evasion primitives for HTTP Meterpreter payloads, support for tracking service hierarchies, a deeper and more interactive Network Topology view, and continuing our commitment to a modern, consiste...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-51249
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-50443
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-65606
creationtimestamp| type| source ---|---|--- 2026-07-23 15:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd43i7i3i2a...
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
EUVD-2026-48096
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
PT-2026-63906
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-60712
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications...
CVE-2026-60584
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: CSV Management. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation...
CVE-2026-60433
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Integration. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Managemen...