Schwachstellen, die jetzt zählen.

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

Red Hat Enterprise Linux (dpdk, raptor2, dnspython): Mehrere Schwachstellen

fickling: fickling: Arbitrary code execution via safety analysis bypass for dotted attribute paths

fickling: fickling: Arbitrary code execution via safety check bypass

ring/ring-core: Ring: Denial of Service via regular expression backtracking in wrap-nested-params

ssl_verify_fun: ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process…

To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process environment: as PGPASSWORD for the PSQL tool, and under a per-process variable for a utility. Nothing removed it afterwards. pgAdmin's environment is shared by every user's requests and copied into every process it starts, so in server mode another user's later PSQL session or utility inherited the password, and libpq used…

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences.

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was refused only when it lay under the per-user storage directory (STORAGE_DIR), not under a SHARED_STORAGE directory, which ordinary users can upload files to. A user could therefore upload an executable to shared storage, point their binary path at it, and have pgAdmin run it as the operating-system account running pgAdmin. On POSIX…

In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and an LDAP account.

In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and an LDAP account. After LDAP or Kerberos authenticated a user, pgAdmin chose the account to log in by username alone, or took the account Flask-Security's login form had looked up, without checking that it came from the source that authenticated the user. The session therefore belonged to another account, with its role, its servers and…

eu.copernik/copernik-xml-factory: Copernik XML Factory: Information disclosure via unrestricted XInclude resource resolution

crass: crass: Denial of Service via excessive recursion when processing comments

crass: crass: Denial of Service via crafted scientific notation in CSS

hydra: Hydra: Theft of pending deposits via improper transaction validation

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enumerate WooCommerce order IDs via the preview_order parameter and exfiltrate every customer's billing name, address, phone number, and email…

GNU libc: Schwachstelle ermöglicht Denial of Service und Codeausführung

It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. (CVE-2026-18374) It was discovered that the GNU C Library incorrectly handled long domain names in DNS search lists. An attacker on the local network could possibly use this issue to cause GNU C Library to crash, resulting in a denial of service. (CVE-2026-8674) It was…

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete…

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing connector:delete and lock checks to remove connector instances and purge record embeddings.

blender: blender: Arbitrary code execution via crafted .blend file

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.

blender: blender: Arbitrary code execution via thumbnail extractor integer overflow