418067 matches found
PT-2026-116177
A flaw was found in GIMP. An attacker can cause a Denial of Service DoS or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive PAA texture file. Due to an integer overflow when calculating image dimensions during file...
PT-2026-115847
When Gitea's built-in SSH server is enabled START SSH SERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...
PT-2026-115421
The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the 'order id + billing address id also shipping address id' parameter due to missing validation on a user...
PT-2026-115382
FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream New that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTS SIZE request with a cbRequested of fewe...
PT-2026-116049
Name of the Vulnerable Software and Affected Versions ChronoFrame version 1.0.0 Description Missing authentication in the server/api/wizard/ handlers allows unauthenticated attackers to reconfigure already configured instances. By sending a POST request to the '/api/wizard/storage' endpoint, an...
PT-2026-115497
Name of the Vulnerable Software and Affected Versions GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress versions prior to 2.8.193 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticat...
PT-2026-124913
TuxCare rebuilt @angular/router to address 3 CVEs. Fixed in 14.3.0-tuxcare.12...
PT-2026-115882
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...
PT-2026-115889
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
PT-2026-115885
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...
PT-2026-124030
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 12.2.16-tuxcare.7...
PT-2026-124397
TuxCare rebuilt @babel/parser to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-124037
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 15.2.6-tuxcare.7...
PT-2026-124010
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 6.0.1-tuxcare.8...
PT-2026-123984
TuxCare rebuilt @angular/animations to address 4 CVEs. Fixed in 16.2.12-tuxcare.14...
PT-2026-123980
TuxCare rebuilt @angular/animations to address 3 CVEs. Fixed in 15.0.3-tuxcare.6...
PT-2026-124350
TuxCare rebuilt @babel/helper-builder-react-jsx-experimental to address 1 CVE. Fixed in 7.11.5-tuxcare.3...
PT-2026-124296
TuxCare rebuilt @vitest/mocker to address 2 CVEs. Fixed in 3.2.4-tuxcare.2...
PT-2026-124408
TuxCare rebuilt @nestjs/platform-socket.io to address 1 CVE. Fixed in 11.2.4-tuxcare.1...
PT-2026-124160
TuxCare rebuilt @nuxt/schema to address 10 CVEs. Fixed in 4.0.3-tuxcare.4...
PT-2026-124346
TuxCare rebuilt @vitest/pretty-format to address 1 CVE. Fixed in 3.2.4-tuxcare.3...
PT-2026-124012
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 6.1.10-tuxcare.15...
PT-2026-124372
TuxCare rebuilt @astrojs/upgrade to address 1 CVE. Fixed in 4.16.19-tuxcare.5...
PT-2026-124385
TuxCare rebuilt @vitest/spy to address 1 CVE. Fixed in 3.2.4-tuxcare.4...
PT-2026-123700
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-124305
TuxCare rebuilt @astrojs/underscore-redirects to address 1 CVE. Fixed in 5.18.1-tuxcare.3...
PT-2026-123684
TuxCare rebuilt @astrojs/underscore-redirects to address 1 CVE. Fixed in 3.6.5-tuxcare.5...
PT-2026-124641
TuxCare rebuilt svgo to address 3 CVEs. Fixed in 4.0.1-tuxcare.1...
PT-2026-123932
TuxCare rebuilt @angular/animations to address 2 CVEs. Fixed in 14.3.0-tuxcare.10...
PT-2026-124653
TuxCare rebuilt @babel/types to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-124481
TuxCare rebuilt @unhead/schema to address 1 CVE. Fixed in 1.11.20-tuxcare.2...
PT-2026-124159
TuxCare rebuilt @nuxt/schema to address 1 CVE. Fixed in 3.12.4-tuxcare.6...
PT-2026-124639
TuxCare rebuilt @babel/traverse to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-123659
TuxCare rebuilt @angular/animations to address 10 CVEs. Fixed in 10.2.5-tuxcare.8...
PT-2026-124608
TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-123615
TuxCare rebuilt fast-uri to address 7 CVEs. Fixed in 3.0.6-tuxcare.2...
PT-2026-124426
TuxCare rebuilt @nuxt/webpack-builder to address 11 CVEs. Fixed in 3.12.4-tuxcare.12...
PT-2026-124400
TuxCare rebuilt @babel/parser to address 1 CVE. Fixed in 7.24.5-tuxcare.2...
PT-2026-123666
TuxCare rebuilt @angular/animations to address 3 CVEs. Fixed in 5.1.2-tuxcare.6...
PT-2026-123673
TuxCare rebuilt @unhead/dom to address 1 CVE. Fixed in 1.11.20-tuxcare.2...
PT-2026-123906
TuxCare rebuilt @angular/animations to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...
PT-2026-123961
TuxCare rebuilt @angular/animations to address 3 CVEs. Fixed in 13.4.0-tuxcare.11...
PT-2026-124327
TuxCare rebuilt @nuxt/vite-builder to address 1 CVE. Fixed in 3.12.4-tuxcare.2...
PT-2026-123999
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 18.1.2-tuxcare.8...
PT-2026-123935
TuxCare rebuilt @angular/animations to address 2 CVEs. Fixed in 15.2.2-tuxcare.3...
PT-2026-124485
TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.12.5-tuxcare.1...
PT-2026-124427
TuxCare rebuilt @nuxt/webpack-builder to address 1 CVE. Fixed in 3.12.3-tuxcare.8...
PT-2026-124406
TuxCare rebuilt @nestjs/platform-socket.io to address 1 CVE. Fixed in 10.4.22-tuxcare.3...