478323 matches found
CLSA-2026-1790102459 TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 12 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.11...
CVE-2026-43643
Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...
Security update for openssl-certs
This update for openssl-certs fixes the following issue: Updated to 2.90 state bsc1279961: Removed: AffirmTrust Commercial AffirmTrust Networking AffirmTrust Premium AffirmTrust Premium ECC certSIGN ROOT CA Entrust Root Certification Authority PKI Root Certification Authority FIRMAPROFESIONAL CA...
SUSE-SU-2026:4287-1 Security update for openssl-certs
This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority +...
CVE-2026-75517 Novu: Cross-Environment Integration Manipulation (IDOR)
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration by integrationId and organizationId...
CVE-2026-75517
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration by integrationId and organizationId...
CLSA-2026-1790080840 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.14-tuxcare.2...
CLSA-2026-1790074384 TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 19 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1...
CLSA-2026-1790069660 TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 18 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (Gaudi)
Red Hat AI Base Images 3.4.2 Gaudi is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.34 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
BigDiskBuster
BigDiskBuster Windows Defender Update Denial of Service Vulnerability This proof of concept is similar to UnDefend, it prevents windows defender from performing platform/signature updates, Seems to work on all supported windows versions but PoC is a bit buggy and needs some rewritting but you get...
Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities
Summary The vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Remediator code base. IBM Quantum Safe Remediator has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION:...
PT-2026-105982
This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority +...
PT-2026-96942
Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before sending them as attachments. This allows a permitted client to disclos...
PT-2026-96947
Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description A confused deputy issue exists where the server can be forced to read arbitrary local files and attach them to a Jira issue, leading to the exfiltration of sensitive host files and environment...
PT-2026-97049
Name of the Vulnerable Software and Affected Versions Unleash versions prior to 8.0.3 Description An authorization bypass exists in the feature management platform where the system fails to verify if strategy IDs provided in a request body belong to the project, feature, and environment specified...
PT-2026-96928
Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description An arbitrary local file read issue exists in the Confluence and Jira upload attachment tool paths. The implementation accepts an unconstrained file path and opens the referenced server-local...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090053)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090053 advisory. When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and...