154 matches found
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
The qfqchangeclass function in net/sched/schqfq.c in the Linux kernel before version 6.2.13 allows a out-of-bounds write vulnerability, as lmax can exceed QFQMINLMAX...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587 Vulnerability Details CVEID:CVE-2026-42580 DESCRIPTION: Netty is an asynchronous, event-driven network...
CLSA-2026-1775781159 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 3 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.3...
CVE-2026-32597 affecting package python-jwt for versions less than 2.13.0-1
CVE-2026-32597 affecting package python-jwt for versions less than 2.13.0-1. An upgraded version of the package is available that resolves this issue...
CLEANSTART-2026-HD81299 Security fixes in argo-cd-fips 2.13.9-r0
Package argo-cd-fips version 2.13.9-r0 fixes 9 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-mh63-6h87-95cp, ghsa-2vgg-9h3w-qbr4, ghsa-3wgm-2mw2-vh5m, ghsa-mw99-9chc-xw7r...
CLEANSTART-2026-FM34446 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r0
Package kubernetes-csi-node-driver-registrar version 2.13.0-r0 fixes 59 vulnerabilities: CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870...
CVE-2026-61252
Vulnerability in the Oracle HRMS Hong Kong product of Oracle E-Business Suite component: Hong Kong Payroll. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Hong Kong...
CLEANSTART-2026-SA81922 Security fixes for CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870, CVE-2025-22871, CVE-2025-22872, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 2.13.0-r0, 2.13.0-r1
Multiple security vulnerabilities affect the kubernetes-csi-node-driver-registrar package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-63204
Name of the Vulnerable Software and Affected Versions Oracle Flow Manufacturing versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Flow Manufacturing product of Oracle E-Business Suite. A low privileged attacker with network access via...
PT-2026-61061
Name of the Vulnerable Software and Affected Versions jxxghp MoviePilot versions prior to 2.13.6 Description An issue exists within the Application API component in the /jxxghp/MoviePilot file. A flaw in an unknown function allows for improper authorization, which can be exploited remotely...
TensorFlow has segfault in array_ops.upper_bound
Impactarrayops.upperbound causes a segfault when not given a rank 2 tensor. PatchesWe have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586.The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more informationPlease...
CLEANSTART-2026-NM99858 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0
Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-59945
Impact array ops.upper bound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...
CLEANSTART-2026-DW47642 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0
Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...
GO-2026-5869 Rancher has over-inclusive team membership expansion in GitHub App authentication provider in github.com/rancher/rancher
Rancher has over-inclusive team membership expansion in GitHub App authentication provider in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...
📄 Cockpit CMS 2.13.5 Cross Site Scripting / Account Takeover
Cockpit CMS versions 2.13.5 and below suffer from persistent cross site scripting and cross site request forgery vulnerabilities. CVE-2026-39275 - Stored XSS Leading to Account Takeover in Cockpit CMS Note: Responsibly disclosed to and patched by the Cockpit CMS maintainers prior to publication. ...
EUVD-2026-40297
Rancher has over-inclusive team membership expansion in GitHub App authentication provider...
CVE-2026-41053
CVE-2026-41053 affects Rancher’s GitHub authentication provider, specifically the team membership expansion, where an incorrect authentication caching flaw could grant principal access to any logged-in user. Affected versions are 2.13 prior to 2.13.6 and 2.14 prior to 2.14.2. Root cause: faulty c...
PT-2026-53457
A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...