474654 matches found
CVE-2026-92223 Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3
Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...
CVE-2026-86035
Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...
CVE-2026-102570
ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...
CLSA-2026-1790694436 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.20-tuxcare.2...
CLSA-2026-1790694250 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.33-tuxcare.2...
CVE-2026-86035 Weblate: Mercurial argument injection via repository filenames allows authenticated command execution
Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...
EUVD-2026-88976
Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...
CVE-2026-86035
Weblate versions 4.11.1 through 2026.7.1 are vulnerable to an argument-injection flaw in the Mercurial backend . The root cause is that repository filenames starting with a hyphen (-) may be misinterpreted as Mercurial options rather than literal paths. An authenticated user with component.edit p...
CVE-2026-86035 Weblate: Mercurial argument injection via repository filenames allows authenticated command execution
Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...
EUVD-2026-88971
ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...
Exploit for CVE-2026-8065
CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...
Exploit for CVE-2026-8065
CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_135_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CLSA-2026-1790685464 TuxCare security update for org.springframework.data (3 CVEs)
TuxCare rebuilt 5 org.springframework.data packages to address 3 CVEs. Fixed in 3.5.12-tuxcare.1...
Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.6 security update
Multicluster Global Hub v1.6.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux for NVIDIA. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Important: Red Hat Security Advisory: cjose security update
An update for cjose is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root
Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-48233 CVE-2023-48233 in vim - Patched by Root
Root has patched CVE-2023-48233 in the vim package for Root:Alpine:3.18. Multiple fixed versions available...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...