CVE-2026-55971

A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...

Security Bulletin: Sterling Order Management System Software, (On prem)

Summary Multiple vulnerabilities were addressed in Sterling Order Management System Software, On prem : 10.0.2607.0-Sterling-SSFF-All-Major-Update-Installer Vulnerability Details CVEID:CVE-2026-48978 DESCRIPTION: oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

CVE-2026-18452 Rich Source｜DMS+ (Non-Mobile) - Use of Hard-coded Credentials

DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...

EUVD-2026-51393

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

GHSA-534Q-W7FF-7VH6 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FF33-VW52-C9P4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8VPQ-9F8G-39VM vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-59870 vulnerabilities

Vulnerabilities for packages: renovate...

GHSA-97HW-VMR9-C44J vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-96FG-W4M5-JGWC vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16387 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QVXH-VVJM-VPWG vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-JWQR-9422-W9P4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-7RG2-8XRH-RWH8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-4WJ3-8493-W74M vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16412 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-X563-34JC-9396 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8RFC-PHX9-6VC2 vulnerabilities

Vulnerabilities for packages: firefox...

[SECURITY] Fedora 43 Update: unbound-1.25.2-1.fc43

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...