247916 matches found
Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:3425-1 Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...
joserfc: joserfc: JWT Malleability via Non-Standard Padding
A flaw was found in joserfc, a Python library for JSON Object Signing and Encryption JOSE standards. This vulnerability allows the library to accept JSON Web Tokens JWTs that include non-standard trailing padding. An attacker could exploit this to create malleable JWTs, potentially bypassing...
CVE-2026-18361
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the datastore upload function...
CVE-2026-16971
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
CVE-2026-16970
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-18360
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...
CVE-2026-18362
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-16969
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
EUVD-2026-51074
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16970
The CVE-2026-16970 entry concerns the IRIS web application (notably version 2.4.26, and possibly others) with a logout functionality that is ineffective. This can allow stolen session cookies to be misused for an extended period. According to the provided documents, the vulnerability affects the ...
CVE-2026-16970
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16970 DFIR-IRIS Insufficient Logout Implementation
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-18362 DFIR-IRIS Missing Brute Force Protection in User Authentication
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-18362 DFIR-IRIS Missing Brute Force Protection in User Authentication
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
EUVD-2026-51073
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-18362
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-18362
CVE-2026-18362 concerns the IRIS web application (noted in version 2.4.26 and possibly other revisions) that does not protect user authentication against brute-force attacks. The connected sources confirm the affected software and the underlying issue but do not provide details on exploit vectors...
CVE-2026-16971
The CVE-2026-16971 entry concerns the IRIS web application (noted around version 2.4.26) where MFA validation is not protected against brute-force attempts. The connected CVE records consistently describe insufficient brute-force protection for OTP validation, indicating that an attacker could re...