14189 matches found
CVE-2026-25144
Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6...
CVE-2026-25238 PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...
CLSA-2026-1770114861 net-snmp: Fix of CVE-2025-68615
CVE-2025-68615: Fix buffer overflow issue in snmptrapd daemon to prevent crashes...
RHSA-2026:1790 Red Hat Security Advisory: openssh security update
Bulletin has no description...
Important: Red Hat Security Advisory: resource-agents security update
An update for resource-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
Security update for openvpn (important)
openSUSE security update: security update for openvpn ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20137-1 Rating: important References: bsc1254486 Cross-References: CVE-2025-13086 CVSS scores: CVE-2025-13086 SUSE : 7.5...
Debian dla-4465 : clamav - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4465 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4465-1 [email protected] https://www.debian.org/lts/security/...
CVE-2026-24763
OpenClaw/Docker sandbox: A command injection due to unsafe PATH handling when constructing shell commands. An authenticated user who can influence environment variables could execute commands inside the container context. This was fixed in version 2026.1.29 (prior to that, OpenClaw was vulnerable).
OPENSUSE-SU-2026:20148-1 Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver PMD allows an attacker on a VM in the system to leak information and cause a denial of service on the network interface bsc1254161. Other issues fixed...
Important: Red Hat Security Advisory: fence-agents security update
An update for fence-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update...
Huawei EulerOS: Security Advisory for coreutils (EulerOS-SA-2026-1107)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
golang-github-openprinting-ipp-usb security update
0.9.27-4 - rebuild to fix CVE-2025-61729...
EulerOS 2.0 SP13 : ruby (EulerOS-SA-2026-1215)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : URI is a module providing classes to handle Uniform Resource Identifiers. In versions prior to 0.12.5, 0.13.3, and 1.0.4, a bypass exists for the fi...
UBUNTU-CVE-2025-71186
In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to drop the reference taken when looking up the DMA mux platform device during route allocation. Note that holding a reference to a device does not prevent i...
CLSA-2026-1769773749 net-snmp: Fix of CVE-2025-68615
CVE-2025-68615: fix buffer overflow vulnerability in net-snmp snmptrapd daemon...
SUSE CVE-2026-24842
node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path...
openSUSE Security Advisory (SUSE-SU-2026:0308-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-15288
CVE-2025-15288 concerns Tanium Interact with an improper access controls vulnerability. Affected product: Tanium Interact (component). Root cause: improper access controls described in multiple sources linked to the CVE entry. Public data show a low to medium overall impact per CVSS vectors (CON/...