python312-3.12.13-8.1 on GA media (moderate)

python312-3.12.13-8.1 on GA media Announcement ID: openSUSE-SU-2026:11428-1 Rating: moderate Cross-References: CVE-2026-0864 CVE-2026-11940 CVE-2026-11972 CVE-2026-15308 CVE-2026-3276 CVE-2026-4360 CVE-2026-7210 CVE-2026-7774 CVE-2026-8328 CVSS scores: CVE-2026-0864 SUSE : 7.5...

PT-2026-67406

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.3 Description The '/api/search/searchEmbedBlock' endpoint passes a client-supplied SQL statement directly to the main read-write siyuan.db handle without restrictions on single statements, read-only access, or...

CVE-2025-71399 Better Auth before 1.4.5 Path Normalization Bypass via rou3

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path resolve to the same route. In Better Auth versions prior to 1.4.5 which bundles the fixed rou3, this can allow...

MINI-PPPR-HC3X-3Q4G

Bulletin has no description...

MINI-V3VM-4RG2-VPRV

Bulletin has no description...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

WordPress Event Booking Manager for WooCommerce plugin < 5.3.7 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin WpEvently versions 5.3.7...

WordPress LWS Optimize plugin < 3.4 - Subscriber+ Cache Deletion vulnerability

Subscriber+ Cache Deletion vulnerability discovered by Omar Elshopky in WordPress Plugin LWS Optimize versions 3.4...

[SECURITY] Fedora 43 Update: lemonldap-ng-2.23.2-1.fc43

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

Fedora 43 : nextcloud (2026-51116fe081)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51116fe081 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 43 : exim (2026-d6839a7c95)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d6839a7c95 advisory. This is new version fixing command execution with alternate privilege. Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : GitPython (2026-7dfa949ea9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7dfa949ea9 advisory. Update to 3.1.55: Fixes GHSA-2f96-g7mh-g2hx, GHSA-v396-v7q4-x2qj, GHSA-956x-8gvw-wg5v, GHSA-rwj8-pgh3-r573, GHSA-3rp5-jjmw-4wv2, GHSA-r9mr-m37c-5fr3,...

python313-GitPython-3.1.56-1.1 on GA media (moderate)

python313-GitPython-3.1.56-1.1 on GA media Announcement ID: openSUSE-SU-2026:11419-1 Rating: moderate Cross-References: CVE-2023-40267 CVE-2023-40590 CVE-2023-41040 CVSS scores: CVE-2023-40267 SUSE : 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2023-40590 SUSE : 7.8...

CVE-2026-67338

creationtimestamp| type| source ---|---|--- 2026-08-01 23:16:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lzuwy6x24 2026-08-01 23:17:05+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2m2h37u72m 2026-08-01 23:17:06+00:00| seen|...

CVE-2026-67329

creationtimestamp| type| source ---|---|--- 2026-08-01 23:14:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lwauabc2m 2026-08-01 23:15:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lwtkxdv2n 2026-08-01 23:15:13+00:00| seen|...

CVE-2026-67333

creationtimestamp| type| source ---|---|--- 2026-08-01 22:38:59+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jwd337n2v 2026-08-01 22:39:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jwe2prf2e 2026-08-01 22:39:20+00:00| seen|...

CVE-2026-16091

creationtimestamp| type| source ---|---|--- 2026-08-01 18:11:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22ylmwcp2l 2026-08-01 18:51:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms256xjb2s25 2026-08-01 18:51:37+00:00| seen|...

CVE-2026-18059

creationtimestamp| type| source ---|---|--- 2026-08-01 18:08:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22ryomeu2d 2026-08-01 18:45:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24vhlzzw24 2026-08-01 18:48:14+00:00| seen|...

[SECURITY] Fedora 43 Update: libgit2-1.9.6-1.fc43

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

GHSA-7QF5-7PPR-87V8 Duplicate Advisory: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8rxv-jg7p-wvg3. This link is maintained to preserve external references. Original Description Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX...