490177 matches found
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...
CVE-2026-56289 affecting package patch for versions less than 2.7.6-10
CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...
CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27
CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...
CVE-2025-46327 affecting package telegraf for versions less than 1.31.0-27
CVE-2025-46327 affecting package telegraf for versions less than 1.31.0-27. A patched version of the package is available...
CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68171 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68171 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64599 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64599 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-47718
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. When secureEnabled=true, FUXA 1.3.0-2773 still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue...
CVE-2026-47717 FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue...
EUVD-2026-57598
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...
CVE-2026-73491
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: URIs whose scheme is split or prefixed with the HTML5 named whitespace character...
CVE-2026-73490
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanitizer applies its local-reference restriction only to the xlink:href attribute on SVG use and feImage elements, while browsers also accept...
CVE-2026-73430
Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSHMSGKEXECDHINIT with a 32-byte all-zero QC value. Curve25519Kex::serverdh in russh/src/kex/curve25519.rs accepts the all-zero peer public value and computes an...
CVE-2026-13433 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 ACS is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation...
MINI-M3WM-WWW8-867H
Bulletin has no description...
MINI-2752-Q4R4-CM23
Bulletin has no description...