Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-1997)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1997 advisory. The incremental HTML parser html.parser.HTMLParser allows for CPUdenial-of-service through repeated unterminated markup declarations whenprocessing uncontrolled data. CVE-2026-15308 In the...

MiracleLinux 9 : php-8.0.30-6.el9_8 (AXSA:2026-1445:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1445:02 advisory. php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability CVE-2026-6722 PHP: PHP: Denial of Service via...

Security update for ffmpeg-4 (important)

openSUSE security update: security update for ffmpeg-4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21522-1 Rating: important References: bsc1272752 bsc1272754 bsc1272758 bsc1272765 bsc1272768 Cross-References: CVE-2026-64830 CVE-2026-64832...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15718 firefox: thunderbird: Mitigation...

GHSA-QWWW-VCR4-C8H2 vulnerabilities

Vulnerabilities for packages: vitess, librechat...

GHSA-5V2H-R2CX-5XGJ vulnerabilities

Vulnerabilities for packages: arangodb...

CVE-2022-21681 vulnerabilities

Vulnerabilities for packages: arangodb...

GHSA-QWWW-VCR4-C8H2 vulnerabilities

Vulnerabilities for packages: vitess...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - IoT Component uses...

Security Bulletin: Due to the use of jackson-databind, IBM EntireX is vulnerable to multiple vulnerabilities.

Summary Due to the use of jackson-databind, IBM EntireX is vulnerable to multiple vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-59888, and CVE-2026-59889. To address these vulnerabilities, the webMethods...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: zulu-psu, openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: zulu-psu, openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-65804

creationtimestamp| type| source ---|---|--- 2026-08-03 12:45:03+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-66325

creationtimestamp| type| source ---|---|--- 2026-08-03 11:45:39+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-66313

creationtimestamp| type| source ---|---|--- 2026-08-03 11:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-56609 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information...

CVE-2026-56608

CVE-2026-56608 affects HCL iControl with a Missing Access Control flaw. The issue allows users to access or view administrator-level functionalities without proper authorization due to failed enforcement of granular access controls. The public records (NVD, CVE lists, and related feeds) do not sp...

CVE-2026-56608 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization...