httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...

CVE-2026-47396

Plausible vulnerability CVE-2026-47396 affects PraisonAI’s call server. Before version 4.6.40, the network-facing API under praisonai.api.agent_invoke (mounted by praisonai.api.call) authenticates fail-open when CALL_SERVER_TOKEN is not configured, exposing unauthenticated access on 0.0.0.0. Endp...

CVE-2024-51314

creationtimestamp| type| source ---|---|--- 2026-07-21 15:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr64m5so3o2e...

MGASA-2026-0287 Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

CVE-2026-8284

creationtimestamp| type| source ---|---|--- 2026-07-21 14:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr62dsikrz2s...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: sqlpad, prism, npm, lerna, saf, code-server, kubeflow-centraldashboard, pulumi...

CVE-2026-8285

creationtimestamp| type| source ---|---|--- 2026-07-21 14:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ylmaf242q...

CVE-2026-16408

creationtimestamp| type| source ---|---|--- 2026-07-21 14:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5yga5vpe2q 2026-07-21 14:12:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5yj722mj2u 2026-07-21 21:00:06+00:00| seen|...

CVE-2026-16410

creationtimestamp| type| source ---|---|--- 2026-07-21 14:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ybdqjnl27 2026-07-21 14:09:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5ydnufyb2j 2026-07-22 04:47:57+00:00| seen|...

DEBIAN-CVE-2026-16377

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16367

Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16366

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

DEBIAN-CVE-2026-16362

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

UBUNTU-CVE-2026-16396

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

UBUNTU-CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

UBUNTU-CVE-2026-16365

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

UBUNTU-CVE-2026-16363

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

UBUNTU-CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

SUSE CVE-2026-63890

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fipdlen in CVL walker drivers/scsi/fcoe/fcoectlr.c::fcoectlrrecvclrvlink advanced the descriptor cursor by an attacker-supplied fipdlen without ever requiring dlen = sizeofstruct fipde...