490425 matches found
CVE-2026-67860
The open62541 library (an open-source OPC UA toolkit) version 1.5.5 is vulnerable to a heap-based buffer overflow in the default HistoryRead path when using the memory backend with the default history database. An attacker could exploit this flaw to cause a denial of service (making the system un...
CVE-2026-67859
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling...
CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
OPENSUSE-SU-2026:11450-1 perl-Mojo-JWT-1.20.0-2.1 on GA media
These are all security issues fixed in the perl-Mojo-JWT-1.20.0-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-51400
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...
Important: kernel-livepatch-6.12.94-123.174
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...
Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-128 (ALASKERNEL-5.10-2026-128)
The version of kernel installed on the remote host is prior to 5.10.260-259.1061. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-128 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output...
Fedora 45 : cri-o1.36 (2026-e58c82fdeb)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e58c82fdeb advisory. Automatic update for cri-o1.36-1.36.3-1.fc45. Changelog Tue Aug 4 2026 Bradley G Smith - 1.36.3-1 - Update to release v1.36.3 - Resolves: rhbz251087...
Amazon Linux 2 : python-tornado, --advisory ALAS2-2026-3847 (ALAS-2026-3847)
The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3847 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...
Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2026-2036)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2036 advisory. A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before...
Amazon Linux 2023 : rclone (ALAS2023-2026-2002)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2002 advisory. Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text...
Vulnerabilities Resolved in Veeam Service Provider Console 9.3
All vulnerabilities documented in this article were resolved in Veeam Service Provider Console 9.3.0.35057. Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure...
Oracle Linux 10 : nodejs-nodemon (ELSA-2026-48032)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-48032 advisory. 3.1.14-2 - Regenerete sources. 3.1.14-1 - Update to version 3.1.14 3.0.3-7 - revert of ce0df1a 3.0.3-6 - deps: revert letting nodemon work with any node Tenab...
VulnCheck KEV: CVE-2026-28409
WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution RCE vulnerability exists in the WeGIA application's database restoration functionality. An attacker with administrative access which can be obtained via the previously reported...
CVE-2026-52370
A reflected cross-site scripting (XSS) vulnerability exists in the Forum posting function of O2OA v10 . Attackers can exploit this flaw by providing a crafted URL to execute arbitrary Javascript within the context of a victim's browser. No specific exploit details or remediation instructions are ...
Important Photon OS Security Update - PHSA-2026-5.0-92-0940
Updates of 'mysql' packages of Photon OS have been released...
OPENSUSE-SU-2026:11446-1 cockpit-repos-4.9-1.1 on GA media
These are all security issues fixed in the cockpit-repos-4.9-1.1 package on the GA media of openSUSE Tumbleweed...
Amazon Linux 2 : python-pillow, --advisory ALAS2-2026-3839 (ALAS-2026-3839)
The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3839 advisory. Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image...
KLA91188 OSI vulnerability in Mozilla Firefox
Information disclosure vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories MFSA2026-73 Exploitation CVE list CVE-2026-18809 high Solution Update to the latest version Download Mozilla Firefox Impacts OSI...
