1406532 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64394
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add a WRITEDAC/WRITEOWNER check to SMB2 SETINFO SECURITY commit cc57232cae23 ksmbd: fix FSCTL permission bypass by adding a permission check for...
Linux Distros Unpatched Vulnerability : CVE-2026-64399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via...
GHSA-6VCH-Q96H-7GC3
creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...
CVE-2026-66337 Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...
CVE-2026-66337
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...
CVE-2026-45112
creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghfg43ts2g...
CVE-2025-71408
creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...
CVE-2026-66139
creationtimestamp| type| source ---|---|--- 2026-07-24 22:55:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgh4sbdvf2n...
GHSA-M3QF-58WF-W979
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e...
GHSA-3WP3-XXJ9-5JQQ
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...
CVE-2026-55497
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:12+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-g9j2-8w95-3vwv...
CVE-2026-55502
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:09+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-hq88-5x99-x3gf...
CVE-2026-62323
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...
EUVD-2026-48299
AWS API MCP Server Security Policy Bypass via Startup Initialization Failure...
CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password
Weintek cMT3092X HMI stores user account passwords in plaintext...
CVE-2026-66036
creationtimestamp| type| source ---|---|--- 2026-07-24 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge2midtr22...
CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...