474509 matches found
CVE-2026-71168
Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
EUVD-2026-93774
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-105859
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...
CVE-2026-105859
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...
CVE-2026-105859 Payload: Unauthorized update to collection documents
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...
CVE-2026-105859 Payload: Unauthorized update to collection documents
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...
CVE-2026-105859
The headless content management system Payload contains a vulnerability in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . An attacker can submit a request to a specific update endpoint to modify collection documents because the system fails to enforce collection or field-leve...
NPM: Payload didn't enforce field-level password update restrictions
NPM: Payload didn't enforce field-level password update restrictions vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
CLSA-2026-1791296249 TuxCare security update for org.springframework.data (3 CVEs)
TuxCare rebuilt 5 org.springframework.data packages to address 3 CVEs. Fixed in 3.1.10.RELEASE-tuxcare.1...
CLSA-2026-1791293888 TuxCare security update for simple-git (2 CVEs)
TuxCare rebuilt simple-git to address 2 CVEs. Fixed in 3.36.0-tuxcare.1...
[SECURITY] [DLA 4825-1] suricata-update security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4825-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 06, 2026 https://wiki.debian.org/LTS -...
CLSA-2026-1791290323 TuxCare security update for lodash (3 CVEs)
TuxCare rebuilt lodash to address 3 CVEs. Fixed in 2.3.0-tuxcare.1...
CLSA-2026-1791289714 TuxCare security update for seroval (1 CVE)
TuxCare rebuilt seroval to address 1 CVE. Fixed in 1.5.6-tuxcare.1...
CLSA-2026-1791289094 TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1...
ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root
Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1791281018 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.14...
ROOT-OS-DEBIAN-11-CVE-2026-34000 CVE-2026-34000 in xorg-server - Patched by Root
Root has patched CVE-2026-34000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...