478364 matches found
CVE-2026-71179: Improper Neutralization of Special Elements used in an OS Command
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileg...
microcode_ctl security update
4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...
PT-2026-93499
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2x00 update fru versions function where a user-supplied BSG request is copied into a fixed 256-byte stack buffer. The function iterates based on the count...
PT-2026-93502
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver. In the format 1 path, the virtual port is located on ha-vp list while holding vport slock, but the lock is released before the...
Fedora 45 : python-django6 (2026-522a9411e7)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-522a9411e7 advisory. Update python-django6 providing python3-django to the latest 6.1.1 release Tenable has extracted the preceding description block directly from the...
PT-2026-93263
Name of the Vulnerable Software and Affected Versions VeloCloud Edge affected versions not specified Description The software update workflow fails to properly validate signatures of update bundles because it does not restrict the digest algorithm used for artifact verification. A digest algorith...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Suricata-Update vulnerability (USN-8766-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8766-1 advisory. Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded...
openssl security update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...
CLSA-2026-1789513129 TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 22 io.netty packages to address 4 CVEs. Fixed in 4.1.43.Final-tuxcare.1...
CVE-2026-78225
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CLSA-2026-1789510477 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 5 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.11...
Important: Red Hat Security Advisory: RHACS 4.11.4 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...
CVE-2026-78225 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-78225 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-78225
Wärtsilä FOS-Onboard contains a hardcoded cryptographic server key in the deployer-ng Update Controller component. This allows an attacker with network access and high complexity to achieve full compromise of confidentiality, integrity, and availability on both the vulnerable and subsequent syste...
Important: Red Hat Security Advisory: RHACS 4.10.8 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...
Important: Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update
An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2026-81923
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
EUVD-2026-79294
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
CVE-2026-81923
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...