Important: postfix security update

The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 For more details about the security issues, including the impact, a CVSS score,...

ALSA-2026:25930 Important: postfix security update

The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 For more details about the security issues, including the impact, a CVSS score,...

RHEL 8 : postfix (RHSA-2026:25932)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:25932 advisory. The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffe...

MINI-W4V9-H425-6JH7

Bulletin has no description...

CVE-2026-12222

creationtimestamp| type| source ---|---|--- 2026-06-14 14:23:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116748909958194636 2026-06-15 07:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpktp47b26 2026-06-15 07:30:32+00:00| seen|...

CVE-2026-12221

creationtimestamp| type| source ---|---|--- 2026-06-14 14:09:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116748855026545149 2026-06-15 07:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpkmlj2e2o 2026-06-15 08:04:48+00:00| seen|...

CVE-2026-12187

creationtimestamp| type| source ---|---|--- 2026-06-14 11:01:21+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116748116284113308 2026-06-14 23:00:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mobuq5fvoe2a 2026-06-14 23:00:17+00:00| seen|...

CVE-2026-50011

creationtimestamp| type| source ---|---|--- 2026-06-14 04:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7v26kzmj2v 2026-06-15 23:11:08+00:00| seen| https://gist.github.com/alon710/6e083e538662dc872931a903f1bab93e 2026-07-10 15:58:59+00:00| seen|...

CVE-2026-44786

creationtimestamp| type| source ---|---|--- 2026-06-13 12:12:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo6a2d7wgh2f...

CVE-2026-12174

creationtimestamp| type| source ---|---|--- 2026-06-13 05:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116741210849212111 2026-06-13 23:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo7faoanvg2o 2026-06-14 03:00:25+00:00| seen|...

CVE-2009-0014

creationtimestamp| type| source ---|---|--- 2026-06-13 05:17:38+00:00| seen| https://mastodon.bsd.cafe/users/grahamperrin/statuses/116741102400640422...

GHSA-PV9G-RRHQ-MPQC

creationtimestamp| type| source ---|---|--- 2026-06-13 05:17:38+00:00| seen| https://mastodon.bsd.cafe/users/grahamperrin/statuses/116741102400640422...

CVE-2026-53519

creationtimestamp| type| source ---|---|--- 2026-06-13 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116739855858486390 2026-06-27 00:35:24+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-5c25-7vpj-9mqh 2026-07-13 22:00:42+00:00|...

Linux Distros Unpatched Vulnerability : CVE-2025-55662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - gpac - None CVE-2025-55662 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

PT-2026-49093

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.5 Description Insecure deserialization occurs in glances/outdated.py because the load cache function uses pickle.load to read a version-check cache file. This file is stored at predictable, world-accessible paths...

CVE-2026-47124

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the server-status WebSocket stream. An attacker can access telemetry data for all servers, including those belonging to other users, by connecting as any authenticated non-admin member. Remediation Upgrade...

CVE-2026-47124 Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...

GHSA-GV7W-RQVM-QJHR

creationtimestamp| type| source ---|---|--- 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205dac4 2026-06-13 16:40:27+00:00| seen| https://gist.github.com/konard/10edfaf46f7ba58bdd3e22a15167f9bc 2026-06-13 16:54:05+00:00| seen|...

GHSA-FP5J-4FJ2-4JVQ Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)

Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs Summary A configuration-validation issue in the Radius Kubernetes controller can cause it to issue a DELETE for the container resource referenced by a tampered radapp.io/status annotation...