2114313 matches found
CGA-MW4X-2QVX-774V
Bulletin has no description...
CGA-X8Q7-7WRJ-CRM6
Bulletin has no description...
CGA-P675-M25R-CW9X
Bulletin has no description...
USN-8817-1 linux, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...
USN-8816-1 linux, linux-aws, linux-aws-7.0, linux-hwe-7.0, linux-ibm, linux-oracle, linux-raspi, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...
CVE-2026-97225 DbGate JSON Runner runners.js code injection
A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the component JSON Runner. Executing a manipulation of the argument comment.text/script.schedule can lead to code injection. The attack may be performed from...
CVE-2026-56737 phpMyFAQ's two-factor authentication login bypasses the password factor
phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID and a valid or brute-forced six-digit TOTP code without firs...
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
GHSA-VF2X-4V53-PM7V Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files
Summary HTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handling unchanged from requests.Session. requests does not check for scheme downgrades or cross-protocol transitions when it follows a redirect, so any https request Streamlink makes can be redirected by the...
GHSA-6RF4-V2FH-M6P4 SunEditor: Critical XSS vulnerability - sanitizer bypass
Summary SUNEDITOR v2.47.10 appears to allow JavaScript execution through crafted namespaced HTML elements. The sanitization logic does not fully remove executable event-handler attributes from certain custom/namespaced tags. As a result, an attacker may be able to inject HTML content that execute...
USN-8815-1 libass vulnerabilities
It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,...
GHSA-4F5F-J737-PM58 REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
Summary The rexlist component reads the SQL sort column directly from the sort GET parameter without validating it against the set of columns declared sortable via setColumnSortable. Although the value is wrapped in backticks via escapeIdentifier preventing classical SQL injection, this still...
MAL-2026-17163 Malicious code in analytics-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b78f3ed716380da74c5d54de6e24b6b128536a7ce5772e8b05d03108a1d9b74 The package is published as 'analytics-widget' with an empty description, but its main module contains no analytics functionality. On load, index.js...
MAL-2026-17164 Malicious code in building-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4618f06d0398ff90ef90003464e79f23609a160f4d1606f60cf797fb73fa6dcb The package's sole content is index.js, which on load schedules a timer that fetches a hardcoded list of privileged same-origin paths /admin,...
MAL-2026-17166 Malicious code in cache-swipper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cb98e5f107fe5bd1cd9434505219880014742674def9c64a8ce8552e04a626 cache-swipper advertises itself as a safe cache and build-artifact cleanup utility, but the exported runOperation function performs an unbounded...
CGA-HQ87-9M3R-7RG4
Bulletin has no description...
CGA-R37W-P7FJ-95CC
Bulletin has no description...
CGA-9V87-RRMV-6WG9
Bulletin has no description...
CGA-82VJ-CW87-JJC6
Bulletin has no description...
MAL-2026-17165 Malicious code in c2-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5e21fe48a0a1a03a1846e11cb06360950603c3bd8ccba5979c431c84779ba0 The package name is 'c2-client' and package.json declares a postinstall hook that executes 'node setup.js' automatically on npm install. The setup...
CGA-9X58-9349-HMW3
Bulletin has no description...
CGA-47JH-377W-JQG8
Bulletin has no description...
CGA-PR8R-VJ2G-26J9
Bulletin has no description...
CGA-J4JG-4FF2-VX3J
Bulletin has no description...
OPENSUSE-SU-2026:21959-1 Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability bsc1276233 - CVE-2026-18301: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability bsc1276230 - CVE-2026-18307: GIMP...
CGA-3R8M-W5QH-WRHQ
Bulletin has no description...
OPENSUSE-SU-2026:21958-1 Security update for haveged
This update for haveged fixes the following issues: Changes in haveged: - CVE-2026-41054: Fixed local privilege escalation via the haveged command socket bsc1264086...
CGA-9X7R-J7J7-7WHR
Bulletin has no description...
CGA-459H-WR23-7V95
Bulletin has no description...
CGA-7VQ6-2PCV-CX8G
Bulletin has no description...
CGA-368G-8P5X-8C5R
Bulletin has no description...
SUSE-SU-2026:4347-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2026-23451: bonding: prevent potential infinite loop in...
SUSE-SU-2026:4346-1 Security update for perl-DBI
This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704...
CGA-C5PM-QJ95-GQPW
Bulletin has no description...
CGA-4WQQ-J7XM-J382
Bulletin has no description...
CGA-4H8W-5RJJ-WJ7C
Bulletin has no description...
OPENSUSE-SU-2026:21956-1 Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - Adding missing CVE references already fixed in the past: CVE-2026-77568 bsc1281638, CVE-2026-68914 bsc1281637...
CGA-H8FC-8G48-79QG
Bulletin has no description...
MINI-G66J-254P-7C79
Bulletin has no description...
CGA-JCVX-5FGH-6M7V
Bulletin has no description...
CGA-PVJ4-QHQG-899J
Bulletin has no description...
CGA-JXVC-22X5-85F8
Bulletin has no description...
CGA-WXX7-P29Q-HV55
Bulletin has no description...
CGA-7F2W-H8CV-MRM2
Bulletin has no description...
CGA-H8MV-PQW7-F767
Bulletin has no description...
MINI-4X72-F42P-743M
Bulletin has no description...
MINI-8CWJ-PMP6-563V
Bulletin has no description...
MINI-RX9X-Q5MW-39X3
Bulletin has no description...