openSUSE 16 Security Update : php-composer2 (openSUSE-SU-2026:21778-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21778-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Tenabl...

ROS-20260909-73-0070

The vulnerability in Chromium is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

PT-2026-88924

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

Online Store Path Traversal

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow an attacker to bypass security restrictions...

platforms for developing and Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

platforms for developing and Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

Online Store Authentication Bypass Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Online Store Authentication Bypass Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

PT-2026-89144

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media tools/dvb mpe.c, descriptorTime slice fec identifier and gf m2ts ipdatagram reader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

GHSA-WMMP-3585-3RMP

creationtimestamp| type| source ---|---|--- 2026-09-08 23:32:32+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680

CVE-2026-47680 is a path traversal vulnerability in FluxCD source-controller (versions 0.0.17 through 1.8.4), a Kubernetes operator for artifact acquisition from Git, OCI, Helm, and S3 sources. Two attack surfaces exist: (1) an actor who can influence the contents of a Bucket-referenced bucket ca...

EUVD-2026-74295

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a "Bucket"...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-86083

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace...

Aegis aegis-v0.14.1-alpha

AEGIS is a desktop app for monitoring local AI agents and reviewing their files and selected actions. Inspect processes, sensitive-file observations, TCP endpoints and attribution evidence in Observatory. Monitoring requires no agent plugin; policy-controlled execution and MCP action tools requir...