247973 matches found
CVE-2026-58052 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...
EUVD-2026-39972
7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...
CVE-2026-58052 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...
[SECURITY] Fedora 43 Update: moby-engine-29.6.0-1.fc43
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
lynx security update
An update is available for lynx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Lynx is a text-based Web browser. Lynx does not display any images, but it does...
Linux Distros Unpatched Vulnerability : CVE-2026-13029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to...
Linux Distros Unpatched Vulnerability : CVE-2026-42005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server i...
Linux Distros Unpatched Vulnerability : CVE-2026-56091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This...
CVE-2026-56447
creationtimestamp| type| source ---|---|--- 2026-06-27 20:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpccs6lve22g...
CVE-2026-12415
creationtimestamp| type| source ---|---|--- 2026-06-27 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u 2026-06-27 06:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s 2026-06-27 06:25:12+00:00| seen|...
CVE-2026-39395 vulnerabilities
Vulnerabilities for packages: commercial-chainloop-backend, policy-controller, trivy, kyverno, chainctl-fips, commercial-chainloop-cli, aactl, ratify, cloudbeat-fips, crossplane, kyverno-notation-aws-fips, ko-fips, kubescape, ratify-fips, cloudbeat, kubescape-server, crossplane-fips, zot,...
GHSA-W6C6-C85G-MMV6 vulnerabilities
Vulnerabilities for packages: commercial-chainloop-backend, policy-controller, trivy, kyverno, chainctl-fips, commercial-chainloop-cli, aactl, ratify, cloudbeat-fips, crossplane, kyverno-notation-aws-fips, ko-fips, kubescape, ratify-fips, cloudbeat, kubescape-server, crossplane-fips, zot,...
[SECURITY] Fedora 44 Update: lighttpd-1.4.84-1.fc44
lighttpd pronounced /lighty/ is a secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments. lighttpd uses memory and CPU efficiently and has lower resource use than other popular web servers. Its advanced feature-set FastCGI, CGI, Auth,...
[SECURITY] Fedora 44 Update: nginx-mod-naxsi-1.6-19.fc44
naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...
[SECURITY] Fedora 44 Update: nginx-1.30.3-1.fc44
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
[SECURITY] Fedora 44 Update: python-postorius-1.3.13-1.fc44
The Postorius Django app provides a web user interface to access GNU Mailman...
[SECURITY] Fedora 43 Update: lighttpd-1.4.84-1.fc43
lighttpd pronounced /lighty/ is a secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments. lighttpd uses memory and CPU efficiently and has lower resource use than other popular web servers. Its advanced feature-set FastCGI, CGI, Auth,...
[SECURITY] Fedora 43 Update: nginx-mod-naxsi-1.6-19.fc43
naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...