472809 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CLSA-2026-1791442790 TuxCare security update for io.projectreactor (1 CVE)
TuxCare rebuilt 3 io.projectreactor packages to address 1 CVE. Fixed in 3.6.4-tuxcare.1...
CVE-2026-104645 Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...
WordPress Image Photo Gallery Final Tiles Grid plugin < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update vulnerability
Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update vulnerability discovered by Ala Bouali in WordPress Plugin Image Photo Gallery Final Tiles Grid versions 3.6.14...
CVE-2026-104645
The Image Photo Gallery Final Tiles Grid WordPress plugin, in versions prior to 3.6.14 , contains an authorization bypass vulnerability. The root cause is the failure to properly verify ownership on several gallery and image management actions, either by checking ownership against the wrong objec...
CLEANSTART-2026-PT37240 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources
CVE-2026-32283 affects multiple packages. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. See references for individual vulnerability details...
PT-2026-107999
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset key...
python3.14 security update
3.14.8-1 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128...
Oracle Linux 10 : rust-sequoia-sq (ELSA-2026-76737)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-76737 advisory. - Update to 1.4.0 and fix CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
EUVD-2026-93503
Payload: Unauthorized update to collection documents...
NPM: Payload: Unauthorized update to collection documents
NPM: Payload: Unauthorized update to collection documents vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
GHSA-F7HX-52Q9-HCRF Payload: Unauthorized update to collection documents
Impact An attacker can submit a request to a specific endpoint that permits collection documents to be updated regardless of access control and field level access control. You are affected if: - You are configuring orderable: true with any collection or join field. Patches In the patched version...
Payload: Unauthorized update to collection documents
Impact An attacker can submit a request to a specific endpoint that permits collection documents to be updated regardless of access control and field level access control. You are affected if: - You are configuring orderable: true with any collection or join field. Patches In the patched version...
Missing Authorization
Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Missing Authorization via the reorder endpoint in packages/payload/src/config/orderable/index.ts, where access control checks on update operations are...
CVE-2026-76437
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...
CLSA-2026-1791392813 TuxCare security update for org.springframework.security (10 CVEs)
TuxCare rebuilt 21 org.springframework.security packages to address 10 CVEs. Fixed in 5.6.9-tuxcare.1...
CLSA-2026-1791392792 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 8 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.12...
react-CVE-2025-55182-fixer
React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...