Coverage tagged "Open source".
Posted by Christopher L. Shannon on Nov 03 Severity: important Affected versions: - Apache ActiveMQ 6.0.0 before 6.3.3 - Apache ActiveMQ before 5.19.12 - ActiveMQ Broker 6.0.0 before 6.3.3 - ActiveMQ…
Posted by Matt Pavlovich on Nov 03 Severity: Moderate Affected versions: - Apache ActiveMQ 6.3.0 before 6.3.3 - Apache ActiveMQ 5.19.0 before 5.19.12 - Apache ActiveMQ 6.4.0 unaffected Description…
Posted by Christopher L. Shannon on Nov 03 Severity: low Affected versions: - Apache ActiveMQ NMS OpenWire Client Library through 2.2.0 Description: Unbounded memory allocation and missing frame size…
Posted by Ben Ford on Nov 03 Hello from the OpenVox project. We released updates to mitigate two 9+ CVE vulnerabilities that affect all known OpenVox and Puppet versions and implementations. Please…
Posted by Andor Molnar on Nov 03 Severity: CVSS 4.0: 8.7 (high) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected versions: - Apache ZooKeeper 3.9.0 through 3.9.7 - Apache…
Posted by Andor Molnar on Nov 03 Severity: important CVSS 4.0: 7.1 (high) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected versions: - Apache ZooKeeper 3.9.0 through 3.9.6 -…
Posted by Andor Molnar on Nov 03 Severity: important CVSS 4.0: 8.7 (high) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected versions: - Apache ZooKeeper 3.9.0 through 3.9.6 -…
Posted by Andor Molnar on Nov 03 Severity: important CVSS 4.0: 8.6 (high) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected versions: - Apache ZooKeeper 3.9.0 through 3.9.6 -…
Posted by Andor Molnar on Nov 03 Severity: moderate CVSS 4.0: 6.0 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N Affected versions: - Apache ZooKeeper 3.9.0 through 3.9.6 -…
Posted by James Bognar on Nov 03 Apache Juneau 9.2.1, released on 2026-11-03, fixes the following vulnerabilities. All affect Apache Juneau through 9.2.0. Users are recommended to upgrade to version…
Posted by Xen . org security team on Nov 03 Xen Security Advisory CVE-2026-102703,CVE-2026-102704 / XSA-523 version 2 arbitrary read/write via grant copy UPDATES IN VERSION 2 Public release. ISSUE…
Posted by feng on Nov 03 Apache Traffic Server: heap-buffer-overflow via HTTP Host header (unbounded alloca pattern, 5 sites) — 90-day disclosure Reporter: Innora Security Research (feng () innora…
Posted by Qingran Zhao on Nov 03 Severity: low Affected versions: - Apache HertzBeat 1.7.1 - Apache HertzBeat 1.7.2 - Apache HertzBeat 1.7.3 - Apache HertzBeat 1.8.0 - Apache HertzBeat 1.9.0 - Apache…
Posted by Robert Rothenberg on Nov 03 CVE-2026-74846 CPAN Security Group CVE ID: CVE-2026-74846 Distribution: Catalyst-Plugin-Authentication Versions: before 0.10029 MetaCPAN…
Posted by Alan Coopersmith on Nov 03 Google Project Zero has now published their analysis at: https://project-zero.issues.chromium.org/issues/565308158
Microsoft has been named a Leader in the inaugural 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms. We believe this recognition reflects Microsoft’s approach to helping organizations…
Serial Number: AV26-802 Date: August 11, 2026 Updated: November 3, 2026 As of August 11, 2026, Siemens is affected by vulnerabilities in the following products: Desigo DXR2 Prior to…
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen…
The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed…
arXiv:2611.00138v1 Announce Type: new Abstract: Existing large language model (LLM) backdoor attacks operate primarily in chat settings, where the risk is bounded by free-form text outputs. AI agents…
