473846 matches found
CLSA-2026-1791272123 TuxCare security update for django (3 CVEs)
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post17+tuxcare...
CLSA-2026-1791271338 TuxCare security update for pyjwt (7 CVEs)
TuxCare rebuilt pyjwt to address 7 CVEs. Fixed in 2.3.0.post4+tuxcare...
CVE-2026-25272
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
EUVD-2026-92974
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
CVE-2026-25272
A Memory Corruption vulnerability exists in the camera CRE driver due to improper handling of buffer limits during hardware update preparation. This Out-of-bounds Write (CWE-787) allows for potential high impact on confidentiality, integrity, and availability. The vulnerability requires high priv...
CVE-2026-25272 Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
CVE-2026-89289 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...
WordPress Fast Courier plugin <= 5.2.3 - Unauthenticated Order Fulfillment Update vulnerability
Unauthenticated Order Fulfillment Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Fast Courier versions = 5.2.3...
CVE-2026-89289 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...
CVE-2026-89289
The Fast Courier WordPress plugin (versions
CLSA-2026-1791266024 TuxCare security update for dulwich (4 CVEs)
TuxCare rebuilt dulwich to address 4 CVEs. Fixed in 0.25.2.post7+tuxcare...
CLSA-2026-1791265304 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.2.post11+tuxcare...
CVE-2026-105621
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...
ROOT-APP-NPM-CVE-2026-54311 CVE-2026-54311 in n8n - Patched by Root
Root has patched CVE-2026-54311 in the n8n package for Root:npm. Multiple fixed versions available...
CVE-2026-105621 jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorization
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...
EUVD-2026-92937
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...
CVE-2026-105621
The software jishenghua jshERP (versions up to 3.5) contains an improper authorization vulnerability within the Financial Receipt Update Handler component. Specifically, the updateAccountHeadAndDetail function in the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java allow...
CVE-2026-105621 jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorization
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...