478320 matches found
CVE-2026-63000 REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates
REDAXO is a PHP-based content management system. Prior to 5.21.2, rexapiinstallpackageupdate in redaxo/src/addons/install/lib/api/apipackageupdate.php inherits the false default from rexapifunction::requiresCsrfProtection instead of requiring a CSRF token. An unauthenticated attacker can cause a...
CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)
TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...
Low: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-82996
creationtimestamp| type| source ---|---|--- 2026-09-23 09:50:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83022
creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83028
creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83090
creationtimestamp| type| source ---|---|--- 2026-09-23 09:47:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83127
creationtimestamp| type| source ---|---|--- 2026-09-23 09:46:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83173
creationtimestamp| type| source ---|---|--- 2026-09-23 09:20:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83174
creationtimestamp| type| source ---|---|--- 2026-09-23 09:20:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83185
creationtimestamp| type| source ---|---|--- 2026-09-23 09:20:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83220
creationtimestamp| type| source ---|---|--- 2026-09-23 09:19:27+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83258
creationtimestamp| type| source ---|---|--- 2026-09-23 09:18:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83263
creationtimestamp| type| source ---|---|--- 2026-09-23 09:18:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83280
creationtimestamp| type| source ---|---|--- 2026-09-23 09:17:44+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83290
creationtimestamp| type| source ---|---|--- 2026-09-23 09:17:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83296
creationtimestamp| type| source ---|---|--- 2026-09-23 09:17:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-95625
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...