75210 matches found
SUSE-SU-2026:3458-1 Security update for vim
This update for vim fixes the following issues: This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary...
Exploit for CVE-2026-63720
CVE-2026-63720: Code Injection in datamodel-code-generator via...
Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse jetty-ee10-jaspi library that could cause broken access controls, potentially allowing unauthorized access or privilege escalation. (CVE-2026-5795).
Summary IBM Storage Protect Server uses the Eclipse jetty-ee10-jaspi library in certain components. A vulnerability in Jetty could cause authentication context being retained in ThreadLocal variables and inadvertently reused by subsequent requests processed on the same thread. This can lead to...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Prototype Pollution
Summary Lodash is used by IBM Storage Fusion Data Foundation, which could cause Prototype Pollution CVE-2025-13465, CVE-2026-2950, CVE-2026-4800. Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the .unset and...
mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user
A flaw was found in MariaDB server. A high-privileged MariaDB user could exploit this vulnerability by manipulating specific global system variables, namely wsrepsstreceiveaddress or wsrepsstdonor. This manipulation could allow the user to execute arbitrary shell commands as the user ID of the...
Important: Red Hat Security Advisory: mariadb10.11 security update
An update for mariadb10.11 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
Exploit for CVE-2026-12940
CVE-2026-12940 — Langflow OSS ≤ 1.10.1 Unauthenticated RCE MC...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...
Important: Red Hat Security Advisory: tigervnc security update
An update for tigervnc is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
building_automation_system_guardian
BAS Guardian - Free Building Automation System BAS Security...
Exploit for CVE-2026-5432
--- 7. CVE-2026-5432 – GraphQL Batching Alias Confusion SQL...
Exploit for Improper Output Neutralization for Logs in Neo4J
CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE !...
📄 Telenia Software TVox 26.5.3 Authentication Bypass
Telenia Software TVox version 26.5.3 and below suffer from an authentication bypass vulnerability in setenv.php. --------------------------------------------------------------------------------- Telenia Software TVox accessToken !== trim$accessToken 300. $force = true; 301. i...
MiracleLinux 8 : kernel-4.18.0-553.147.1.el8_10 (AXSA:2026-1414:57)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1414:57 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited...
RHEL 10 : mariadb10.11 (RHSA-2026:49522)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49522 advisory. MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation...
MiracleLinux 9 : tigervnc-1.15.0-7.el9_8.2 (AXSA:2026-1425:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1425:07 advisory. xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch...
Unbreakable Enterprise kernel security update
5.4.17-2136.358.2 - xfs: resample the data fork mapping after cycling ILOCK Darrick J. Wong Orabug: 39776792 CVE-2026-64600 - net: Work around Marvell NIC TX stalls Venkat Venkatsubra Orabug: 39765820 5.4.17-2136.358.1 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo...
RHEL 6 : tigervnc (RHSA-2026:49519)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49519 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...