474429 matches found
CVE-2026-91798: Incorrect Permission Assignment for Critical Resource
A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...
PT-2026-97232
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A race condition exists in the update mechanism of Foxit PDF Editor/Reader. Due to insufficient file locking and integrity validation, an update package can be replaced by a...
postgresql:15 security update
pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release for rebuild against libpq-12.1-3 1.4.0-3 - BuildRequires libpq-devel 1.4.0-2 - BuildRequires postgresql-server-devel 1.4.0-1 - Update to 1.4.0...
CVE-2026-63000: Cross-Site Request Forgery (CSRF)
REDAXO is a PHP-based content management system. Prior to 5.21.2, rexapiinstallpackageupdate in redaxo/src/addons/install/lib/api/apipackageupdate.php inherits the false default from rexapifunction::requiresCsrfProtection instead of requiring a CSRF token. An unauthenticated attacker can cause a...
PT-2026-97514
Name of the Vulnerable Software and Affected Versions Easy Store versions 1.0.0 through 3.0.0 Description An authenticated administrator can perform a SQL Injection through the coupon bulk update task. The issue occurs because the application takes input IDs and directly concatenates them into ra...
PT-2026-97125
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the test id argument within an unknown function in the '/reviewer 0/admins/assessments/pretest/btn...
PT-2026-112587
Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description Improper link resolution before file access, also known as link following, occurs within the Windows Update Orchestrator Service. This issue allows an authorized...
Apple Security Update: watchOS 27.0.1
Apple recommends to install security update watchOS 27.0.1 on devices Apple Watch Series 12 and Apple Watch Ultra 4...
PT-2026-97217
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A local privilege escalation issue exists in the update daemon of Foxit PDF Editor/Reader. This is caused by an insecure permission configuration that allows regular users to...
Debian dla-4792 : tzdata - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4792 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4792-1 [email protected] https://www.debian.org/lts/security/...
SUSE SLES11 Security Update : openssl-certs (SUSE-SU-2026:4287-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4287-1 advisory. This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: - AffirmTrust Commercial - AffirmTrust Networking...
CLSA-2026-1790109523 TuxCare security update for vitest (2 CVEs)
TuxCare rebuilt vitest to address 2 CVEs. Fixed in 3.2.4-tuxcare.2...
EUVD-2026-84038
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards...
CLSA-2026-1790102459 TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 12 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.11...
CVE-2026-43643
Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...
SUSE-SU-2026:4287-1 Security update for openssl-certs
This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority +...
Security update for openssl-certs
This update for openssl-certs fixes the following issue: Updated to 2.90 state bsc1279961: Removed: AffirmTrust Commercial AffirmTrust Networking AffirmTrust Premium AffirmTrust Premium ECC certSIGN ROOT CA Entrust Root Certification Authority PKI Root Certification Authority FIRMAPROFESIONAL CA...
CVE-2026-75517 Novu: Cross-Environment Integration Manipulation (IDOR)
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration by integrationId and organizationId...