EUVD-2026-51393

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

GHSA-FF33-VW52-C9P4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-534Q-W7FF-7VH6 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8VPQ-9F8G-39VM vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-59870 vulnerabilities

Vulnerabilities for packages: renovate...

GHSA-96FG-W4M5-JGWC vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16387 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-97HW-VMR9-C44J vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-JWQR-9422-W9P4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-7RG2-8XRH-RWH8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-4WJ3-8493-W74M vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QVXH-VVJM-VPWG vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16412 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-X563-34JC-9396 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8RFC-PHX9-6VC2 vulnerabilities

Vulnerabilities for packages: firefox...

[SECURITY] Fedora 43 Update: unbound-1.25.2-1.fc43

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

SUSE CVE-2026-17711

Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-51329

The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework TCF service that does not require any...

CVE-2026-38710

TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input...

CVE-2026-38711

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.upgradecheck interface. This vulnerability allows attackers to execute...