459573 matches found
DEBIAN-CVE-2026-72746
FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured with RdstlsSecurity = TRUE, the handshake dispatches inbound PDUs based solely on the attacker-supplied wire pduType without verifying that the received PDU is the one required ...
DEBIAN-CVE-2026-72745
FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberosDecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libtiff: libtiff-4.7.2-2.hum1 aarch64, x8664 libtiff-devel-4.7.2-2.hum1 aarch64, x8664 libtiff-static-4.7.2-2.hum1 aarch64, x8664 libtiff-tools-4.7.2-2.hum1 aarch64, x8664 libtiff-4.7.2-2.hum1.sr...
DEBIAN-CVE-2026-73151
Bulletin has no description...
DEBIAN-CVE-2026-73148
Bulletin has no description...
DEBIAN-CVE-2026-73142
Bulletin has no description...
CVE-2026-50060
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...
CVE-2026-13737
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X...
CLSA-2026-1786449156 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.2...
CVE-2026-72595
CVE-2026-72595 : In BadChoice Handesk, the vulnerability affects the TicketsController@update endpoint where no authorization check is performed and no team-scoped ownership is enforced. This allows any authenticated agent to update ticket records belonging to other teams, enabling modification, ...
CVE-2026-13739
The CVE-2026-13739 vulnerability affects a legacy Command Center endpoint, described as an unauthenticated Server-Side Request Forgery (SSRF) involving handling of arbitrary target URLs. The issue permits external control over requests initiated from the vulnerable system, with potential impact t...
CVE-2026-13737
The CVE-2026-13737 issue affects Commvault software (Commserve, Webserver, Command Center, Media Agents, Clients, HyperScale X) and is a command execution authorization allowlist bypass. Root cause: bypass of allowlists permits commands to run without proper authorization. Impact stated in the me...
EUVD-2026-56001
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X...
RHSA-2026:53298 Red Hat Security Advisory: nodejs22 security update
Bulletin has no description...
RHSA-2026:53364 Red Hat Security Advisory: resource-agents security update
Bulletin has no description...
RHSA-2026:52990 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:52978 Red Hat Security Advisory: postgresql-jdbc security update
Bulletin has no description...
RHSA-2026:52952 Red Hat Security Advisory: libgcrypt security update
Bulletin has no description...