1341332 matches found
CLSA-2026-1792076165 TuxCare security update for org.springframework.amqp (3 CVEs)
TuxCare rebuilt 6 org.springframework.amqp packages to address 3 CVEs. Fixed in 2.4.17-tuxcare.9...
MINI-J57R-GPJ4-QFVF
Bulletin has no description...
MINI-RR58-8JFM-JRJ8
Bulletin has no description...
MINI-CWFR-36RP-4FJ5
Bulletin has no description...
MINI-P29C-6789-J9PF
Bulletin has no description...
MINI-QM7V-HCPW-2H87
Bulletin has no description...
MINI-P55F-GQR6-RPVF
Bulletin has no description...
MINI-JC93-H8R2-JP3P
Bulletin has no description...
MINI-83J7-WJJ6-7J5F
Bulletin has no description...
MINI-VCHV-8862-W7C4
Bulletin has no description...
MINI-J38M-237G-48M7
Bulletin has no description...
MINI-H59R-GFJR-8288
Bulletin has no description...
MINI-PC57-P8RQ-CCWX
Bulletin has no description...
MINI-P359-6CWW-CQ3V
Bulletin has no description...
MINI-446J-Q989-W375
Bulletin has no description...
MINI-QGRJ-QGV7-9CCC
Bulletin has no description...
MINI-233W-Q843-9WVW
Bulletin has no description...
MINI-H2P7-3GQ7-89HF
Bulletin has no description...
MINI-75F6-M35V-37JH
Bulletin has no description...
MINI-8MPJ-2255-Q93J
Bulletin has no description...
MINI-58PM-25WP-PHCJ
Bulletin has no description...
MINI-GQHW-876X-PF77
Bulletin has no description...
MINI-JJ7W-QX74-96CG
Bulletin has no description...
MINI-J7MH-45VH-6395
Bulletin has no description...
MINI-8R3M-MHVC-9PG8
Bulletin has no description...
CLSA-2026-1792076078 TuxCare security update for io.projectreactor (2 CVEs)
TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.5.12-tuxcare.1...
MINI-HG52-2V4J-8Q52
Bulletin has no description...
MINI-X9FH-82Q5-WCR3
Bulletin has no description...
MINI-9WG3-36XG-WPV6
Bulletin has no description...
MINI-2C7W-VQ5J-VJJ9
Bulletin has no description...
CLSA-2026-1792076060 TuxCare security update for org.springframework.amqp (4 CVEs)
TuxCare rebuilt 7 org.springframework.amqp packages to address 4 CVEs. Fixed in 3.0.10-tuxcare.3...
MINI-H42H-4XQM-34GH
Bulletin has no description...
MINI-C2G7-X665-F2GR
Bulletin has no description...
MINI-45PM-C2WW-7CVW
Bulletin has no description...
MINI-JPQG-3JJM-63CJ
Bulletin has no description...
CLSA-2026-1792075935 TuxCare security update for org.springframework.amqp (4 CVEs)
TuxCare rebuilt 7 org.springframework.amqp packages to address 4 CVEs. Fixed in 3.2.8-tuxcare.1...
MINI-VGPF-947M-57XQ
Bulletin has no description...
MINI-74C4-GMQ4-6V9H
Bulletin has no description...
CLSA-2026-1792075826 TuxCare security update for org.springframework.amqp (3 CVEs)
TuxCare rebuilt 6 org.springframework.amqp packages to address 3 CVEs. Fixed in 2.4.16-tuxcare.2...
CVE-2026-59994 EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received
EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an unauthenticated remote attacker can send an email to a monitored group or IMAP address, including an email-to-Case address, and place arbitrary HTML in its plain-text body. EspoCRM stores that body and...
CVE-2026-55154 EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export
EspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/Espo/Tools/Export/Format/Csv/Processor.php, application/Espo/Tools/Export/Format/Xlsx/OpenSpoutProcessor.php, and application/Espo/Tools/Export/Format/Xlsx/PhpSpreadsheetProcessor.php inspect only...
CVE-2026-55184 EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled
EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypasses moderateSanitizeHtml. When another user opens the template in edit mode and clientCspDisabled is true, the stored...
MINI-22J3-M2FG-QH87
Bulletin has no description...
MINI-4VGQ-3FQ7-R89M
Bulletin has no description...
CVE-2026-53575 EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user
EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authenticated administrator can place crafted content in the applicationName setting through CSP nonce injection. The persistent injection is inserted into the main application page without escaping, allowi...
CVE-2026-108082 Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...
CVE-2026-53574 EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression
EspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an authenticated non-administrator can submit a crafted where parameter to the GET entity streamAttachments endpoint because that query path permits complex expressions. Boolean-based blind SQL injecti...
CVE-2026-46691 EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST /api/v1/Import/id/exportErrors with another user's import identifier and retrieve an attachment identifier for a CSV containing rows from that impor...
CVE-2026-46708 EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privileged user who can access a shared TargetList can invoke opt-out or cancel-opt-out actions for a protected Contact or Lead that the user cannot read or edit. The service validates access to the targ...