472850 matches found
CVE-2026-104658 Reliance on Untrusted Inputs in a Security Decision in hMailServer
The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...
CLSA-2026-1791448365 TuxCare security update for mlflow (2 CVEs)
TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post13+tuxcare...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...
CLSA-2026-1791447404 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.17.3-tuxcare.1...
SUSE-SU-2026:4571-1 Security update 5.2.1 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Added a note about the SUSE Registry IP address change. - Update to SUSE Multi-Linux Manager 5.2.1 Security fixes Ubuntu 26.04 LTS Support Confidential Computing Attestation for IBM Z Series New uyuni-tftpd Container Monitoring:...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CLSA-2026-1791442790 TuxCare security update for io.projectreactor (1 CVE)
TuxCare rebuilt 3 io.projectreactor packages to address 1 CVE. Fixed in 3.6.4-tuxcare.1...
CVE-2026-104645 Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...
WordPress Image Photo Gallery Final Tiles Grid plugin < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update vulnerability
Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update vulnerability discovered by Ala Bouali in WordPress Plugin Image Photo Gallery Final Tiles Grid versions 3.6.14...
CVE-2026-104645
The Image Photo Gallery Final Tiles Grid WordPress plugin, in versions prior to 3.6.14 , contains an authorization bypass vulnerability. The root cause is the failure to properly verify ownership on several gallery and image management actions, either by checking ownership against the wrong objec...
CLEANSTART-2026-PT37240 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources
CVE-2026-32283 affects multiple packages. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. See references for individual vulnerability details...
PT-2026-107999
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset key...
python3.14 security update
3.14.8-1 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128...
Oracle Linux 10 : rust-sequoia-sq (ELSA-2026-76737)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-76737 advisory. - Update to 1.4.0 and fix CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
NPM: Payload: Unauthorized update to collection documents
NPM: Payload: Unauthorized update to collection documents vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
Missing Authorization
Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Missing Authorization via the reorder endpoint in packages/payload/src/config/orderable/index.ts, where access control checks on update operations are...
