266357 matches found
USN-8541-1 vim vulnerabilities
Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue only affected Ubuntu 22.04 LTS, Ubunt...
USN-8541-1: Vim vulnerabilities
Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue only affected Ubuntu 22.04 LTS, Ubunt...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.0 security release
Red Hat JBoss Web Server 7.0.0 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Linux Enterprise 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...
USN-8540-1 openvpn vulnerabilities
It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-11771 It was discovered that...
USN-8539-1 gnutls28 vulnerabilities
Haruto Kimura discovered that GnuTLS did not properly apply permitted name constraints in certain certificate validation paths. A remote attacker could possibly use this issue to bypass certificate validation, leading to a machine-in-the-middle attack. CVE-2026-42011 Oleh Konko discovered that...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms
Summary Multiple vulnerabilities have been found in CICS Transaction Gateway for Multiplatforms due to the use of Apache Tomcat Embed, Spring Web MVC, Spring Boot, Spring Core, Spring Context, Spring Beans and Logback Core. The Apache Tomcat Embed, Spring Web MVC, Spring Boot, Spring Core, Spring...
CVE-2026-11940 vulnerabilities
Vulnerabilities for packages: python...
GHSA-GF2W-JQMQ-FCM8 vulnerabilities
Vulnerabilities for packages: python...
GHSA-489G-7RXV-6C8Q vulnerabilities
Vulnerabilities for packages: mcp-atlassian...
GHSA-G5R6-GV6M-F5JV vulnerabilities
Vulnerabilities for packages: mcp-atlassian...
GHSA-3WQH-87FG-FFGG vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-3CFQ-4XX4-RMPG vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
GHSA-WQXF-PJXH-HH4H vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59874 vulnerabilities
Vulnerabilities for packages: pulumi, sqlpad, lerna, saf, npm, code-server, prism, kubeflow-centraldashboard...
GHSA-3WQH-87FG-FFGG vulnerabilities
Vulnerabilities for packages: libssh2...
xorg-x11-server-Xwayland security update
An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...
SUSE-SU-2026:2976-1 Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. - CVE-2026-41677: openssl: out-of-bounds read in PEM password...