137 matches found
Astra Linux – Vulnerability in binutils
A vulnerability has been discovered in GNU Binutils 2.45. The affected element is the function elfswapshdr in the bfd/elfcode.h library of the Linker component. Manipulation of this function leads to a heap-based buffer overflow. This attack must be carried out locally. The exploit has been...
CVE-2026-15662
CVE-2026-15662 affects the WordPress plugin “Advanced Woo Labels – Product Labels & Badges for WooCommerce” up to version 2.48. The vulnerability is a Stored Cross-Site Scripting via the bg_color parameter, caused by insufficient input sanitization and output escaping. An attacker with contributo...
CLEANSTART-2026-LR60096 Security fixes in dex-fips 2.40.0-r3
Package dex-fips version 2.40.0-r3 fixes 1 vulnerabilities: CVE-2025-47907...
CLEANSTART-2026-AG72507 Security fixes in dex 2.45.1-r3
Package dex version 2.45.1-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39834, CVE-2026-39821, CVE-2026-25680...
CLEANSTART-2026-OV66054 Security fixes in binutils 2.40-r10
Package binutils version 2.40-r10 fixes 1 vulnerabilities: CVE-2023-1972...
CVE-2026-55081
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the scope query parameter into the generated HTML document without sufficient sanitization. A crafted scope value could be rendered a...
CVE-2022-24045
creationtimestamp| type| source ---|---|--- 2026-07-17 05:00:05+00:00| seen| https://t.me/EchelonEyes/276 2026-07-18 00:00:38+00:00| seen| https://t.me/EchelonEyes/276...
CVE-2026-13595 affecting package util-linux for versions less than 2.40.2-5
CVE-2026-13595 affecting package util-linux for versions less than 2.40.2-5. A patched version of the package is available...
CVE-2026-48918
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default...
EUVD-2026-32510
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation...
CVE-2026-8275
A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogodippprimitives.go of the component zerogod IPP Service. Performing a manipulation results in integer coercion error. The attack can be...
GHSA-CWFQ-RFCR-8HMP Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs
Zebra Transparent SIGHASHSINGLE Corresponding-Output Handling Diverges From zcashd Summary For V5+ transparent spends, Zebra and zcashd disagree on the same consensus rule: SIGHASHSINGLE must fail when the input index has no corresponding output. zcashd treats this as consensus-invalid under...
CVE-2026-5928 Potential buffer under-read in ungetwc
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...
CVE-2026-5358
REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache...
GNU C Library 安全漏洞
The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.43 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the use of the ungetwc function on character sets with...
CVE-2025-69649 affecting package binutils for versions less than 2.41-11
CVE-2025-69649 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...
CVE-2025-69647 affecting package binutils for versions less than 2.41-11
CVE-2025-69647 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...
CVE-2025-11839 affecting package binutils for versions less than 2.41-11
CVE-2025-11839 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...