474685 matches found
CVE-2025-15485: Missing Authorization
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...
CVE-2026-84677: Improper Neutralization of Input During Web Page Generation
Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values plugin names, descriptions, and version metadata on plugin download index pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide a plugin for hosting...
OPENSUSE-SU-2026:11664-1 apptainer-1.5.3-3.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11671-1 bson-devel-2.5.1-1.1 on GA media
These are all security issues fixed in the bson-devel-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11665-1 ffmpeg-7-7.1.5-2.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.5-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85166
These are all security issues fixed in the ffmpeg-7-7.1.5-2.1 package on the GA media of openSUSE Tumbleweed...
go-fdo-client security update
1.0.0-7 - Rebuild go-fdo-client against updated golang 1.0.0-6 - Rebuild go-fdo-client against updated golang 1.0.0-5 - Rebuild against updated golang...
go-fdo-server security update
1.0.1-4 - Rebuild go-fdo-server against updated golang 1.0.1-3 - Rebuild against updated golang...
gimp:2.8 security update
gimp 2:2.8.22-26.8 - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18303 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-66758 - fix CVE-2026-18304 - fix CVE-2026-18307 pygobject2 2.28.7-5 - bump spec to fix NVR pygtk2 2.24.0-25 - Fix shebang mangling for prefix=app 1907579 -...
PT-2026-85177
These are all security issues fixed in the trivy-0.74.0-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-90714
This update for lkl fixes the following issues: Changes in lkl: - Updated to match current kernel...
PT-2026-85171
These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed...
php:8.2 security, bug fix, and enhancement update
php 8.2.33-1 - rebase to 8.2.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 2.0.3-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 2.0.3-2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz1971065...
freerdp security update
2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724, RHEL-236063, RHEL-246245...
OPENSUSE-SU-2026:11676-1 trivy-0.74.0-2.1 on GA media
These are all security issues fixed in the trivy-0.74.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11667-1 hauler-2.1.0-1.1 on GA media
These are all security issues fixed in the hauler-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85165
These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85169
These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed...
Stored XSS vulnerability in update-center2
https://github.com/jenkins-infra/update-center2/Update-center2 is the tool used to generate the Jenkins update sites hosted on updates.jenkins.io. NOTE: While it is designed for use by the Jenkins project for this purpose, others may be using it to operate their own self-hosted update sites...