CVE-2026-0861 affecting package glibc for versions less than 2.35-9

CVE-2026-0861 affecting package glibc for versions less than 2.35-9. A patched version of the package is available...

CVE-2025-11961 affecting package nmap for versions less than 7.93-4

CVE-2025-11961 affecting package nmap for versions less than 7.93-4. A patched version of the package is available...

CVE-2025-61594 affecting package ruby for versions less than 3.1.7-4

CVE-2025-61594 affecting package ruby for versions less than 3.1.7-4. A patched version of the package is available...

CVE-2025-68471 affecting package avahi for versions less than 0.8-5

CVE-2025-68471 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2025-69277 affecting package libsodium for versions less than 1.0.18-7

CVE-2025-69277 affecting package libsodium for versions less than 1.0.18-7. A patched version of the package is available...

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-3001 affecting package pytorch for versions less than 2.0.0-12

CVE-2025-3001 affecting package pytorch for versions less than 2.0.0-12. A patched version of the package is available...

CVE-2026-24515 affecting package expat for versions less than 2.6.4-3

CVE-2026-24515 affecting package expat for versions less than 2.6.4-3. A patched version of the package is available...

CVE-2025-68151 affecting package coredns for versions less than 1.11.1-25

CVE-2025-68151 affecting package coredns for versions less than 1.11.1-25. A patched version of the package is available...

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

WordPress Relevanssi Premium plugin < 2.25.0 - Unauthenticated Private/Draft Post Disclosure vulnerability

Unauthenticated Private/Draft Post Disclosure vulnerability discovered by Krzysztof Zając CERT PL in WordPress Plugin Relevanssi Premium versions 2.25.0...

AZL-76824 CVE-2025-47911 affecting package cert-manager for versions less than 1.11.2-27

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

firefox: thunderbird: Information disclosure in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking component...

firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

firefox: thunderbird: Information disclosure in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking component...

ManageEngine OpManager Stored XSS in Subnet Details (CVE-2025-9226)

The version of ManageEngine OpManager running on the remote web server is below 128465 / 128570 / 128582. It is, therefore, affected by a stored cross-site scripting XSS vulnerability in the subnet details functionality. An authenticated, low-privileged user with permission to modify subnet detai...

WordPress Salon booking system plugin < 9.6.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Salon booking system versions 9.6.3...

WordPress User Profile Builder plugin < 3.15.2 - Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated Arbitrary Password Reset vulnerability discovered by Drew Webber mcdruid in WordPress Plugin Profile Builder versions 3.15.2...