2425 matches found
RHSA-2026:25120 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
BELL-CVE-2026-46310
Bulletin has no description...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute due to the lack of the Secure attribute on session and OIDC state cookies in the authentication process. An attacker can recover session cookies and impersonate a user or enab...
MINI-RRQR-6G9J-R9FP
Bulletin has no description...
CVE-2026-11837 Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown
A local privilege escalation vulnerability was found in the ansible.posix authorizedkey module. The module's keyfile function uses os.chown instead of os.lchown and opens files without ONOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their...
EUVD-2026-35833
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim...
MINI-JPF7-86JP-7X7C
Bulletin has no description...
MINI-78RF-FGPM-X6CC
Bulletin has no description...
MINI-V2H4-CRWR-CQVQ
Bulletin has no description...
MINI-C727-X8M9-2XCP
Bulletin has no description...
DEBIAN-CVE-2026-41848
Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the following methods in AntPathMatcher: matchString pattern, String path, matchStartString pattern, String pat...
CVE-2026-11603
The Product Filter Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'argsfilterFormArray' Parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CGA-JVQM-7R6W-JX8H
Bulletin has no description...
MINI-HJF9-G4HG-7QV8
Bulletin has no description...
MINI-3M25-27RR-JM6J
Bulletin has no description...
MINI-WVXW-G2X2-FC6Q
Bulletin has no description...
MINI-MJ5R-FG3M-FJ4V
Bulletin has no description...