PT-2026-89434

Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...

PT-2026-89435

Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...

PT-2026-89300

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...

OPENSUSE-SU-2026:11748-1 python315-3.15.0~rc2-1.1 on GA media

These are all security issues fixed in the python315-3.15.0rc2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89439

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions...

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21809-1 Rating: important References: bsc1270127 bsc1271660 bsc1272402 bsc1276514 bsc1276644 bsc1277949 bsc1278270 bsc1278273 bsc1278688...

Fedora 43 : openssl (2026-00b3d3d018)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-00b3d3d018 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-39020

An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...

Security update for tomcat11

This update for tomcat11 fixes the following issues: CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

OPENSUSE-SU-2026:21816-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662,...

WordPress Inquiry cart plugin <= 3.4.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Inquiry Cart versions = 3.4.2...

WordPress WP Docs plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin WP Docs versions = 2.3.4...

WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability

Path Traversal vulnerability discovered by Sergei Pro in WordPress Plugin Groundhogg versions = 4.7.1...

CVE-2026-86082

creationtimestamp| type| source ---|---|--- 2026-09-09 10:57:03+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7...

CVE-2026-86075

creationtimestamp| type| source ---|---|--- 2026-09-09 10:56:59+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7 2026-09-12 14:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdavovp6c25...

CVE-2025-3271

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2026-87795

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashe...

CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2025-3271

CVE-2025-3271 is attributed in the initial record to a DOM-based XSS in OpenText Documentum Webtop versions prior to 16.7.1 , rated CVSS 4.0 4.8 (MEDIUM) requiring low privileges and active user interaction with low impact on confidentiality and integrity. A connected PT Security entry (PT-2025-2...