GHSA-X2WV-9P67-MH9W vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35371 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35352 vulnerabilities

Vulnerabilities for packages: uutils...

[SECURITY] Fedora 44 Update: dovecot-2.4.4-1.fc44

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

CVE-2026-41438

hw/uefi: add namesize check to uefivarsmmlockvariable...

CVE-2026-41437

hw/uefi: fix ucs2 string helper functions...

The vulnerability of the `startAnimation` method in the `StageCoordinator.java` class of the Framework component in Android operating systems allows a hacker to disclose protected information.

The vulnerability of the startAnimation method in the StageCoordinator.java class of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Linux Distros Unpatched Vulnerability : CVE-2025-60485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation violation in the gfisomapplesettagex function /isomedia/isomwrite.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-48827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload- pack, git-receive-pack, and other git operations allows...

GHSA-5V4G-VW9X-H534 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-Q6M9-XJ2W-XMRC vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-898C-Q2CR-XWHG vulnerabilities

Vulnerabilities for packages: unleash, kubeflow-katib, librechat, wazuh-dashboard-fips, awx, wazuh-dashboard, langfuse, redisinsight, nextcloud-server, kibana, kubeflow-centraldashboard, gitlab-rails-ce, prism, arangodb, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards-fips,...

CVE-2026-44492 vulnerabilities

Vulnerabilities for packages: unleash, airflow-core, librechat, wazuh-dashboard-fips, awx, wazuh-dashboard, langfuse, airflow, redisinsight, nextcloud-server, kibana, kubeflow-centraldashboard, gitlab-rails-ce, prism, arangodb, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards-fips,...

GHSA-35JP-WW65-95WH vulnerabilities

Vulnerabilities for packages: unleash, kubeflow-katib, librechat, wazuh-dashboard-fips, awx, wazuh-dashboard, langfuse, redisinsight, nextcloud-server, kibana, kubeflow-centraldashboard, gitlab-rails-ce, prism, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards-fips, jitsucom-jitsu, lerna...

Vulnerability Disclosure in the Age of AI

New article: "Responsible Disclosure in the Age of AI: A Call for Urgent Action," by Melissa Hathaway. Abstract: Artificial intelligence is fundamentally reshaping the balance between vulnerability discovery and remediation. Frontier AI models are now capable of autonomously identifying exploitab...

Malicious code in chai-as-minted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d83ed5082a6682efba4b40e072e84fb1f7c6aa0dbf8ecd56a62c8d485e058e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-46605

Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, fr...

CVE-2026-49389

Unknown description...

Linux Distros Unpatched Vulnerability : CVE-2026-42250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds write to a globa...

Linux Distros Unpatched Vulnerability : CVE-2024-13745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - edk2 - None Ubuntu Linux - several issues with partition table measurements CVE-2024-13745 Note that Nessus relies on the presence of the package...