15571 matches found
SUSE CVE-2026-56016
CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...
CVE-2026-13117
An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage...
CVE-2025-66035 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
DEBIAN-CVE-2026-53357
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...
CVE-2021-36776 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
PYSEC-2026-665 Mercurial Improper Certificate Validation vulnerability
Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack...
Mercurial Improper Certificate Validation vulnerability
Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack...
Security Bulletin: The IBM Common Licensing using IBM® SDK, Java™ Technology Edition affected by multiple vulnerabilities
Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their January 2026 Critical Patch Update. For more information please refer to Oracle's January 2026 CPU Advisory and the CVE links referenced below. IBM Common Licensing i...
CVE-2026-14125
creationtimestamp| type| source ---|---|--- 2026-07-02 08:18:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:47:19+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...
CVE-2026-14100
creationtimestamp| type| source ---|---|--- 2026-07-02 08:15:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...
CVE-2026-46073
creationtimestamp| type| source ---|---|--- 2026-07-02 06:49:43+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...
CVE-2026-13987
creationtimestamp| type| source ---|---|--- 2026-07-02 04:20:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6la3e4l2b 2026-07-02 04:20:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn6ld3aon2g 2026-07-02 07:48:23+00:00| seen|...
CVE-2026-24240
creationtimestamp| type| source ---|---|--- 2026-07-02 02:00:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwo7elco2q 2026-07-02 08:14:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnln7peqr2m...
AlmaLinux 9 : xorg-x11-server (ALSA-2026:26610)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:26610 advisory. xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch...
CVE-2026-14064
creationtimestamp| type| source ---|---|--- 2026-07-01 23:55:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmpq7a5cs2y 2026-07-02 07:51:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 18:55:07+00:00| seen|...
CVE-2026-14113
creationtimestamp| type| source ---|---|--- 2026-07-01 21:49:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmioz3n2p24 2026-07-02 01:49:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmw4ubgif2u 2026-07-02 08:17:25+00:00| seen|...
Malicious code in svgcraft-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3863ea8f67c7365031b5ffb43aaa2721062669b49be8157e1dd32ce19dce511f src/index.cjs exports getPlugin, which returns a function that performs an HTTPS GET to a hardcoded URL 'https://api.avax-test.dev/ext/bc/C/rpc' with...
CVE-2026-13807
creationtimestamp| type| source ---|---|--- 2026-07-01 19:47:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbuchs6h26 2026-07-02 07:19:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:29:40+00:00| seen|...