3021 matches found
CLSA-2026-1779410892 TuxCare security update for 82 packages (1 CVE)
TuxCare rebuilt 82 packages to address 1 CVE. Fixed in 3.3.13-tuxcare.3...
CLSA-2026-1777163883 TuxCare security update for trim-newlines (1 CVE)
TuxCare rebuilt trim-newlines to address 1 CVE. Fixed in 3.0.0-tuxcare.1...
CLSA-2026-1775781172 TuxCare security update for rollup (2 CVEs)
TuxCare rebuilt rollup to address 2 CVEs. Fixed in 3.15.0-tuxcare.1...
CLSA-2026-1774570934 TuxCare security update for fast-redact (1 CVE)
TuxCare rebuilt fast-redact to address 1 CVE. Fixed in 3.5.0-tuxcare.1...
CLSA-2026-1773015258 TuxCare security update for hawk (2 CVEs)
TuxCare rebuilt hawk to address 2 CVEs. Fixed in 3.1.0-tuxcare.1...
CVE-2026-18631 jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the component PreAuthorize Handler. The manipulation leads to authorization...
RLSA-2026:47183 Important: compat-libtiff3 security update
The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fixes: libtiff: libtiff: Heap-based buffer overflow vi...
PT-2026-67406
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.3 Description The '/api/search/searchEmbedBlock' endpoint passes a client-supplied SQL statement directly to the main read-write siyuan.db handle without restrictions on single statements, read-only access, or...
MINI-V3VM-4RG2-VPRV
Bulletin has no description...
GHSA-7QF5-7PPR-87V8 Duplicate Advisory: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8rxv-jg7p-wvg3. This link is maintained to preserve external references. Original Description Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX...
CVE-2026-67306
FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...
UBUNTU-CVE-2026-67306
FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...
EUVD-2026-51834
FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...
CVE-2026-67303
FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...
SUSE CVE-2026-54158
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view database cell renderer genAVValueHTML interpolates cell content raw in four of its branches: text, url, phone, and mAsset. A cell value like or " breaks out of its surrounding tag and runs arbitrary...
CLEANSTART-2026-EW52288 Security fixes in cassandra-reaper-fips 3.8.0-r3
Package cassandra-reaper-fips version 3.8.0-r3 fixes 2 vulnerabilities: ghsa-gc5v-m9x4-r6x2, CVE-2026-25645...
CLEANSTART-2026-RZ01875 Security fixes in argo-cd-fips 3.1.12-r1
Package argo-cd-fips version 3.1.12-r1 fixes 4 vulnerabilities: CVE-2026-24051, CVE-2025-68121, CVE-2025-61732, CVE-2026-25934...
CLEANSTART-2026-RB15576 Security fixes in kyverno-policy-reporter-fips 3.7.3-r1
Package kyverno-policy-reporter-fips version 3.7.3-r1 fixes 3 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-39883...