SUSE CVE-2026-57213

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...

CVE-2026-11898

CVE-2026-11898 affects the White Label CMS WordPress plugin (all versions up to and including 2.7.12). It enables Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. Attack scenario: an authenticated attacker with administrator-level permissi...

Linux Distros Unpatched Vulnerability : CVE-2025-12506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain...

CVE-2025-12506

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from t...

CVE-2025-12506 Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from t...

Mozilla Thunderbird < 140.12.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-64 advisory. - An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content,...

Alibaba Cloud Linux 3 : 0180: webkit2gtk3 (ALINUX3-SA-2026:0180)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0180 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-28847: The issue was addressed wi...

Apple Safari resource management error vulnerability (CNVD-2026-28245)

Apple Safari is a web browser designed for the Apple operating system. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to incorrect memory references. Attackers can exploit this vulnerability by processing maliciously crafted web content,...

Apple Safari path traversal vulnerability (CNVD-2026-26335)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It supports web browsing and rendering functions. Apple Safari has a path traversal vulnerability, which stems from an inability to correctly verify file paths. Attackers can exploit this...

Apple Safari resource management error vulnerability (CNVD-2026-28248)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for browsing web pages and processing web content. There is a resource management vulnerability in Apple Safari. The cause of this vulnerability is the improper handling of...

Apple Safari resource management error vulnerability (CNVD-2026-28251)

Apple Safari is a web browser used primarily for accessing and browsing web content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit this vulnerability to cause memory...

Apple Safari Content Resource Management Error Vulnerability (CNVD-2026-26337)

Apple Safari is a web browser developed by Apple, primarily used on iOS, iPadOS, and macOS systems. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper handling of memory management; attackers can exploit this vulnerability to cause Safari to crash...

Apple Safari buffer overflow vulnerability (CNVD-2026-26435)

Apple Safari is the default web browser integrated in iOS, iPadOS, and macOS systems, used for browsing internet content on Apple devices. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from improper handling of maliciously crafted web content. Attackers can exploit th...

Apple Safari WebKit memory corruption vulnerability (CNVD-2026-26340)

Apple Safari is a web browser developed by Apple Inc., utilizing the WebKit rendering engine. It primarily serves the function of browsing web pages. Apple Safari has a memory corruption vulnerability. This vulnerability stems from the failure to properly manage memory when processing maliciously...

Apple Safari resource management error vulnerability (CNVD-2026-28250)

Apple Safari is a web browser developed by Apple Inc., primarily designed for browsing internet pages and rendering web content. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to memory-related errors. Attackers can exploit this...

Apple Safari buffer overflow vulnerability (CNVD-2026-26436)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. Apple Safari has a buffer overflow vulnerability, which stems from an inability to properly validate boundaries. Attackers can exploit this vulnerability by processing maliciously crafted web...

Apple Safari resource management error vulnerability (CNVD-2026-28244)

Apple Safari is a web browser available for iOS, iPadOS, and macOS platforms, primarily used for accessing internet content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit...

Apple Safari buffer overflow vulnerability (CNVD-2026-26434)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. It provides web browsing functionality. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from insufficient validation of boundary checks. Attackers can exploit this...

Apple Safari buffer overflow vulnerability (CNVD-2026-26364)

Safari is a web browser developed by Apple Inc., whose main function is to browse web content. Apple Safari has security vulnerabilities; these vulnerabilities arise due to improper handling of maliciously constructed web content. Attackers can exploit these vulnerabilities to cause memory...

DEBIAN-CVE-2026-43742

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpecte...