490244 matches found
UBUNTU-CVE-2026-86219
Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...
SUSE-SU-2026:23628-1 Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...
OPENSUSE-SU-2026:21765-1 Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...
WordPress Bold Page Builder plugin < 5.9.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Luka Zimonjic in WordPress Plugin Bold Page Builder versions 5.9.9...
CVE-2026-86218
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14...
CVE-2026-86218
N-central (N-able) is affected by a pre-authentication remote code execution vulnerability in versions prior to 2026.3.1.14 . The CVSS 4.0 base score is 10.0 (CRITICAL) , with high impact across confidentiality, integrity, and availability for both vulnerable and subsequent systems. CISA's SSVC a...
CVE-2026-67276 SSH user impersonation possible in Mikrotik RouterOS
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...
CVE-2017-4878
creationtimestamp| type| source ---|---|--- 2026-09-05 13:00:05+00:00| seen| Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9VB3fBkIKhegqBZOEZc4 2026-09-06 00:00:45+00:00| published-proof-of-concept| Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9VB3fBkIKhegqBZOEZc4...
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
...
WordPress JCH Optimize plugin 4.2.1-5.0.0 - Admin+ Path Traversal vulnerability
Admin+ Path Traversal vulnerability discovered by Krugov Artyom in WordPress Plugin JCH Optimize versions 4.2.1-5.0.0...
CVE-2026-86142
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.15.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
[SECURITY] Fedora 44 Update: composer-2.10.3-1.fc44
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
SUSE CVE-2026-52856
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...
EUVD-2026-71775
In Ignition 8.1.53 and earlier, the Gateway "Create Project Roles" setting shipped blank, which permitted any authenticated user to create projects if they can execute gateway scripts. Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3...
PT-2026-86302
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
CVE-2026-18843: Improper Neutralization of Input During Web Page Generation
The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'noresultsmessage' nodepreview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanitization and output escaping. This makes it possible for...
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-247-02)
The version of mozilla-firefox installed on the remote host is prior to 140.15.0esr / 153.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-247-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...
