478364 matches found
CVE-2026-81923 Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editor
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
CVE-2026-81923 Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editor
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
CVE-2026-81923 Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editor
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
CLSA-2026-1789496607 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 2 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.1...
RLSA-2026:67155 Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...
Before You Patch. Why Patch Reliability Matters for Confident Deployment
Executive Summary Microsoft’s September 2026 security updates,KB5124008 and KB5124012 , have been linked to USB audio failures on some Windows systems, highlighting the operational risk that can accompany security patching. Qualys TruRisk Eliminate classified both updates as Low Reliability ,...
USN-8766-1 suricata-update vulnerability
Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule archives. An attacker could possibly use this issue to write arbitrary files outside the configured rules directory...
USN-8766-1: Suricata-Update vulnerability
Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule archives. An attacker could possibly use this issue to write arbitrary files outside the configured rules directory...
CLSA-2026-1789484097 TuxCare security update for com.fasterxml.jackson.core:jackson-core (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 4 CVEs. Fixed in 2.17.2-tuxcare.1...
CLSA-2026-1789484066 TuxCare security update for 13 packages (1 CVE)
TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 14.2.35-tuxcare.9...
CLSA-2026-1789481683 TuxCare security update for yaml (1 CVE)
TuxCare rebuilt yaml to address 1 CVE. Fixed in 2.4.2-tuxcare.1...
CLSA-2026-1789479340 TuxCare security update for websocket-driver (2 CVEs)
TuxCare rebuilt websocket-driver to address 2 CVEs. Fixed in 0.7.4-tuxcare.1...
CLSA-2026-1789478968 TuxCare security update for vitest (1 CVE)
TuxCare rebuilt vitest to address 1 CVE. Fixed in 4.0.18-tuxcare.1...
CLSA-2026-1789477857 TuxCare security update for vue-template-compiler (1 CVE)
TuxCare rebuilt vue-template-compiler to address 1 CVE. Fixed in 2.2.6-tuxcare.1...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.5 security update
Red Hat Advanced Cluster Management for Kubernetes v2.16 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...
CLSA-2026-1789475453 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 3.2.25.post5+tuxcare...
CLSA-2026-1789475134 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.post9+tuxcare...
Moderate: Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...