472486 matches found
PT-2026-89716
These are all security issues fixed in the xen-4.22.0 04-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-89715
These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-89710
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.1-1.1 package on the GA media of openSUSE Tumbleweed...
python3.14-cryptography security update
45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249...
PT-2026-89077
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...
PT-2026-89709
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed...
Security Advisory 0182
Security Advisory 0182 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6...
PT-2026-89069
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...
redis:7 security update
7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...
The vulnerability of the l2tp_session_get_by_ifname() function in the net/l2tp/l2tp_core.c module of the Linux operating system’s L2TP tunneling protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the l2tpsessiongetbyifname function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...
The vulnerability of the Windows Update Stack component allows attackers to escalate their privileges.
The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
Fedora 44 : libevent (2026-72d10c874d)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72d10c874d advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...
CVE-2026-82563: Authentication Bypass by Spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...
CVE-2026-77974: Missing Authentication for Critical Function
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...
CVE-2026-86760: Incorrect Authorization
Snipe-IT versions 8.2.0 through 8.6.x fixed in 8.7.0 contain an incorrect authorization flaw in app/Http/Controllers/Users/UsersController::update. The single-user edit route assigned the activated field from the request payload before evaluating the canEditAuthFields authorization gate, so an...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-106771)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106771 advisory. FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When...
Oracle Linux 8 : ELSA-2026-65160-0: / thunderbird (ELSA-2026-651600)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651600 advisory. 140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...
Oracle Linux 9 : ELSA-2026-64774-0: / python3.14-cryptography (ELSA-2026-647740)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647740 advisory. 45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249 Tenable has extracted the preceding description block...
ALSA-2026:66179 Important: perl-DBI security update
DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...