40628 matches found
PT-2026-66739
The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the mailerpress/v1/contact endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to...
WordPress MailerPress – Newsletter, email marketing & AI automation plugin <= 1.5.0 - Missing Authorization to Unauthenticated Contact Updates vulnerability
Missing Authorization to Unauthenticated Contact Updates vulnerability discovered by Jakub Lipiński A3RES in WordPress Plugin MailerPress versions = 1.5.0...
SUSE CVE-2026-39972
Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a battery-efficient way. Prior to 0.22.0, a cache key collision vulnerability in TopicSelectorStore allows an attacker to poison the match result cache, potentially causing private updates to be delivered to...
SUSE CVE-2026-59691
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...
CVE-2026-67347
Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update methods that allows channel-scoped administrators to modify other tenants' data. Attackers can supply global IDs of StockLocation or...
CVE-2026-67347
Vendure 3.7.1 contains a cross-channel authorization bypass. In stock-location.service.ts and asset.service.ts update methods, channel-scoped administrators can supply global IDs from different channels to overwrite inventory locations or catalog assets belonging to other tenants, bypassing chann...
Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...
Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities
Summary Multiple vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-14631 DESCRIPTION:...
Security update for liboqs, oqs-provider
This update for liboqs, oqs-provider fixes the following issues: disable KEMHQC and SIGMQOM and KEMNTRUPRIME on s390x for now, testsuite shows them not working. Updated to 0.16.0: Deprecation notice: SPHINCS+ was removed in 0.16.0. Security issues: Fixed uninitialized encapsderand pointer...
FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
The Federal Communications Commission FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US. Previously authorized...
CVE-2026-44103
An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...
CLEANSTART-2026-VK07836 Security fixes in terragrunt-fips 0.94.0-r3
Package terragrunt-fips version 0.94.0-r3 fixes 13 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...
CLEANSTART-2026-TS90565 Security fixes in curl 8.4.0-r0
Package curl version 8.4.0-r0 fixes 2 vulnerabilities: CVE-2023-38545, CVE-2023-38546...
CLEANSTART-2026-QQ55998 Security fixes in postgresql15 10.4-r0
Package postgresql15 version 10.4-r0 fixes 1 vulnerabilities: CVE-2018-1115...
CLEANSTART-2026-AG72507 Security fixes in dex 2.45.1-r3
Package dex version 2.45.1-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39834, CVE-2026-39821, CVE-2026-25680...
CLEANSTART-2026-EH19903 Security fixes in kyverno-fips 1.18.0-r0
Package kyverno-fips version 1.18.0-r0 fixes 2 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj...
CLEANSTART-2026-AA33839 Security fixes in activemq 6.2.3-r1
Package activemq version 6.2.3-r1 fixes 10 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-22745, CVE-2026-22741...
CLEANSTART-2026-AB94931 Security fixes in postgresql 9.6.4-r0
Package postgresql version 9.6.4-r0 fixes 3 vulnerabilities: CVE-2017-7546, CVE-2017-7547, CVE-2017-7548...
CLEANSTART-2026-QN68353 Security fixes in spark-sc213-jdk17-py312 4.0.3-r0
Package spark-sc213-jdk17-py312 version 4.0.3-r0 fixes 10 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-3g76-f9xq-8vp6...