Project: Drupal core Date: 2026-July-15 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross-site scripting Affected versions: <10.6.13...
Vendor Advisories
This category highlights official security advisories and bulletins from vendors, including patch notices, product-specific vulnerabilities, remediation guidance, and important updates affecting supported technologies and platforms.
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0,...
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Enterprise versions 10.4.1, 10.2.5,...
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Universal Forwarder versions 10.4.1,...
It was discovered that Tomcat incorrectly handled authorization when multiple method constraints defined the same HTTP method....
It was discovered that Sympa did not properly validate input on the generic SSO login. A remote...
An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP...
It was discovered that idna did not properly reject oversized inputs before performing expensive processing. An attacker...
It was discovered that libslirp incorrectly handled TCP urgent data. A privileged attacker inside a guest VM...