261626 matches found
CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....
GHSA-XMQ2-CRJ6-VR9M vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-MMG7-4C9C-2R54 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CG63-H6R4-GP45 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-MMG7-4C9C-2R54 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-XMQ2-CRJ6-VR9M vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-H8WM-M326-VH8H vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-58150
Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4...
CVE-2026-64556
CVE-2026-64556 pertains to the Linux kernel PMU subsystem (perf/core). When a performance event group leader is removed during process exit, its surviving siblings can remain active and still linked to the removed leader’s list, leaving the PMU context active list in a potentially inconsistent st...
CVE-2026-57834
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...
BELL-CVE-2026-64511
Bulletin has no description...
BELL-CVE-2026-64419
Bulletin has no description...
BELL-CVE-2026-64431 CVE-2026-64431 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64260
Bulletin has no description...
BELL-CVE-2026-64532
Bulletin has no description...
CVE-2026-13690
The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor login handler, allowing an attacker who already knows a user's credentials to bypass the second authentication factor and log in as that user...
CVE-2026-12144
creationtimestamp| type| source ---|---|--- 2026-07-29 03:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwzlx4dh2a 2026-07-29 03:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxacujlm2g 2026-07-29 07:00:17+00:00| seen|...
CVE-2026-18072
creationtimestamp| type| source ---|---|--- 2026-07-29 02:48:40+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrqvz4d6i72p 2026-07-29 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrra5ix6zt2y 2026-07-29 06:43:40+00:00| seen|...