ROOT-OS-UBUNTU-2204-CVE-2023-54107 CVE-2023-54107 in linux - Patched by Root

Root has patched CVE-2023-54107 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CLEANSTART-2026-OH83140 Security fixes in trust-manager-fips 0.20.3-r0

Package trust-manager-fips version 0.20.3-r0 fixes 6 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2025-61730, CVE-2025-61726...

CLEANSTART-2026-WI97391 Security fixes in opensearch-k8s-operator-fips 2.7.0-r8

Package opensearch-k8s-operator-fips version 2.7.0-r8 fixes 23 vulnerabilities: CVE-2026-25679, CVE-2025-61726, CVE-2025-61725, CVE-2025-61723, CVE-2026-27142...

CLEANSTART-2026-QN25000 Security fixes in configmap-reload 0.15.0-r0

Package configmap-reload version 0.15.0-r0 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CLEANSTART-2026-DJ44755 Security fixes in aws-privateca-issuer-fips 1.7.0-r1

Package aws-privateca-issuer-fips version 1.7.0-r1 fixes 23 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2026-42499, CVE-2026-33814, CVE-2026-27143...

CLEANSTART-2026-QJ89264 Security fixes in wave-fips 0.9.0-r3

Package wave-fips version 0.9.0-r3 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CVE-2026-18084

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

MINI-23MM-C65P-H37J

Bulletin has no description...

ROOT-OS-UBUNTU-2204-CVE-2023-25564 CVE-2023-25564 in rootio-gss-ntlmssp - Patched by Root

Root has patched CVE-2023-25564 in the rootio-gss-ntlmssp package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-61310

creationtimestamp| type| source ---|---|--- 2026-07-23 18:18:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:44:48+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrz6nxn4gg2c...

CVE-2026-60368

creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbn5xyb2r2q 2026-07-23 04:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbxafd5kr2a 2026-07-23 16:52:52+00:00| seen|...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-1929)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1929 advisory. tarfile.extractall with the 'data' or 'tar'filter could be bypassed by a crafted archive where a hardlinkreferences a symlink stored at a deeper name than the hardlink itself.The extraction...

CVE-2026-45320

DataEase (open source data visualization/analysis tool) is affected by an SQL injection in dashboard variables. Prior to version 2.10.23, dashboard SQL variables (e.g., ${deptId}) are processed by SqlparserUtils.transFilter(), whose final branch returns raw user input for non-in and non-between o...

CVE-2026-45419

DataEase contains an arbitrary file write vulnerability present before version 2.10.23. The flaw resides in template handling: the TemplateManageService#save, StaticResourceServer#saveFilesToServe methods and the /de2api/templateManage/save endpoint accept attacker-controlled staticResource names...

Injection fast-uri Dependency in Jira Software Data Center

This High severity Injection vulnerability was introduced in versions 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2023-24215

creationtimestamp| type| source ---|---|--- 2026-07-06 11:48:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxzhzp5nk2j...

SUSE-SU-2026:2673-1 Security update for bind

This update for bind fixes the following issues: Security issues: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. - CVE-2026-3593: Heap use-after-free vulnerabilit...

Security update for openbabel (critical)

openSUSE security update: security update for openbabel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21190-1 Rating: critical References: bsc1217676 bsc1258501 bsc1258507 bsc1259041 Cross-References: CVE-2022-37331 CVE-2022-41793 CVE-2022-42885...

EUVD-2026-40869

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...