261709 matches found
GO-2026-6015 Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper
Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper...
GO-2026-6047 Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev
Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev...
GHSA-VX8H-4PRV-G744 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
UBUNTU-CVE-2026-9737
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...
CVE-2026-64829
Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field in qa-include/app/users-edit.php...
CVE-2026-61209
creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sw2ebq2v 2026-07-23 18:17:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings...
CVE-2026-14881
CVE-2026-14881 affects MongoDB Compass: during imports of connections, an attacker can override connection options that are not normally changeable via the connection form. Specifically, a custom browser open command for the OIDC authentication flow can be injected, which is typically configured ...
SUSE-SU-2026:22860-1 Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...
CVE-2026-52470
creationtimestamp| type| source ---|---|--- 2026-07-22 18:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraxzjxawt2i...
CVE-2026-65011
creationtimestamp| type| source ---|---|--- 2026-07-22 18:32:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraxil67sb2e...
Moderate: Red Hat Security Advisory: libpng12 security update
An update for libpng12 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
CVE-2026-65650
creationtimestamp| type| source ---|---|--- 2026-07-22 17:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mravkyzzuk2i 2026-07-24 15:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94957 2026-07-24 18:00:04+00:00| published-proof-of-concept|...
CVE-2026-52472
creationtimestamp| type| source ---|---|--- 2026-07-22 17:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratrlnzd52y...
CVE-2026-59886
creationtimestamp| type| source ---|---|--- 2026-07-22 17:06:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o 2026-07-22 17:06:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m...
CVE-2018-3214
creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:05+00:00| seen| Telegram/5IRIQQOTDCKuLb20SN-AA5fEEYRiSpvsdYTvkd2O8wAhw 2026-07-22 17:00:05+00:00| seen| Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ 2026-07-23 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-13321
creationtimestamp| type| source ---|---|--- 2026-07-22 16:47:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u 2026-07-22 16:49:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrarpynzcg2x 2026-07-22 19:01:40+00:00| seen|...
CVE-2026-59884
creationtimestamp| type| source ---|---|--- 2026-07-22 16:44:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrarghsgs22o...
