490244 matches found
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...
SUSE-SU-2026:3961-1 Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. bsc1268596 - Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. - Fix flag parsing so tha...
org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification
A flaw was found in the asynchronous version of Apache HttpComponents Client. This improper Transport Layer Security TLS hostname verification vulnerability allows a remote attacker to intercept and modify network traffic. By presenting a valid certificate for a different domain, an attacker can...
CVE-2026-79679 Use of Weak Credentials
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2
cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.7 security update
Important: Red Hat OpenShift GitOps v1.19.7 security update An update is now available for Red Hat OpenShift GitOps...
WordPress Pre-Orders for WooCommerce plugin <= 2.3.1 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by MoonFuji in WordPress Plugin Pre-Orders for WooCommerce versions = 2.3.1...
WordPress Photo Gallery by 10Web plugin < 1.8.44 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Photo Gallery by 10Web versions 1.8.44...
WordPress Advanced Custom Fields: Extended plugin < 0.9.2.7 - Unauthenticated Administrator Account Takeover vulnerability
Unauthenticated Administrator Account Takeover vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin ACF Extended versions 0.9.2.7...
kernel: NFSv4/flexfiles: reject zero filehandle version count
A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...
PT-2026-85088
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
PT-2026-85112
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
PT-2026-85094
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
Oracle Linux 10 : ELSA-2026-61377-0: / nodejs24 (ELSA-2026-613770)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613770 advisory. 1:24.19.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.19.0-1 - Update to version 24.19.0 Tenable has extracte...
PT-2026-85101
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
PT-2026-85117
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
PT-2026-85113
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
PT-2026-85099
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...