249341 matches found
OESA-2026-3151 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-3150 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-3118 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
GHSA-35RM-7J9C-2F7M vulnerabilities
Vulnerabilities for packages: zed...
GHSA-P9J2-GV94-2WF4 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, langfuse, peerdb-ui, homepage, keep-fips, keep...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, langfuse, peerdb-ui, homepage, keep-fips, keep...
SUSE CVE-2026-56684
unknown...
SUSE CVE-2026-63728
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
EUVD-2026-48438
Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send a single unauthenticated HTTP GET...
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
...
PT-2026-64263
Name of the Vulnerable Software and Affected Versions SUNNET Corporate Training Management System versions prior to 10.4 Description The e-paper draft upload function contains a flaw that allows remote authenticated users with administrator privileges to execute arbitrary commands. This is achiev...
PT-2026-64315
Name of the Vulnerable Software and Affected Versions Image::WebP versions prior to 0.3.0 Description Image::WebP bundles a copy of libwebp version 0.3.0 instead of linking to the system library. This bundled version contains multiple known security flaws. The issue occurs when the module decodes...
PT-2026-64354
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the DAMON sysfs implementation. The system maintains DAMOS tried region directory objects using a linked list. When a user requests a directory refresh,...
The vulnerability of the console-based graphic editor ImageMagick, related to reading data outside of the allowed range in memory, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Critical Photon OS Security Update - PHSA-2026-5.0-90-0929
Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...
ROS-20260724-73-0035
The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2026-64358
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC codecs simple-mux component where the simple mux control put function fails to properly validate enum control bounds. Because enum control values are...
PT-2026-64378
Name of the Vulnerable Software and Affected Versions sysPass versions prior to 3.2.12 Description Authenticated administrators can execute arbitrary commands as the web server process user by configuring a malicious backup path and triggering a backup. The FileBackupService constructs a tar shel...
PT-2026-64311
Name of the Vulnerable Software and Affected Versions Devolutions PowerShell Universal versions prior to 2026.2.3 Description The variables feature stores sensitive information in cleartext on the disk when no vault is selected. This allows a local actor with file system access to read secret...