261704 matches found
UBUNTU-CVE-2026-16768
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...
CVE-2026-60377
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxmfu6ug2u 2026-07-29 07:37:06+00:00| seen|...
CVE-2026-60375
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxit4vlo23 2026-07-29 13:07:07+00:00| seen|...
CVE-2026-16584
creationtimestamp| type| source ---|---|--- 2026-07-23 17:04:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116970375756122049 2026-07-23 17:04:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrdd2js4g22v 2026-07-24 01:01:22+00:00| seen|...
CVE-2026-61183
creationtimestamp| type| source ---|---|--- 2026-07-23 16:54:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdchdro2t2j 2026-07-23 18:17:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:24:46+00:00| seen|...
CVE-2026-60362
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfx65f4ic2a 2026-08-03 20:37:06+00:00| seen|...
CVE-2026-61174
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcdps45p24 2026-07-23 18:16:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60284
creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrmubtc7z32v...
CVE-2026-60277
creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnf2bur232i...
CVE-2026-60193
creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60169
creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-46923
creationtimestamp| type| source ---|---|--- 2026-07-23 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65916 CyberPanel Missing Authorization in cancelBackupCreation Handler
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...
CVE-2026-48533
CVE-2026-48533 is rejected and not an active vulnerability entry.
GHSA-5QJQ-93H5-HRGP pypdf: Possible large memory usage for wrong image dimensions
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...
CVE-2026-65537
creationtimestamp| type| source ---|---|--- 2026-07-23 14:44:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrd3a2mgit2y 2026-08-12 11:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msuyvgbptv2r...
Improper Check for Unusual or Exceptional Conditions
Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the getToken function. An attacker can cause the application to throw an unhandled exception and disrupt service availability by sending...
DEBIAN-CVE-2026-65901
DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...
UBUNTU-CVE-2026-65899
DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTEDTYPESPOLICY. A later caller that requests RETURNTRUSTEDTYPE output receives a TrustedHTML...
