262006 matches found
CLEANSTART-2026-ML74336 Security fixes for CVE-2026-42504 applied in versions: 1.26.8-r4
Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-XN78570 Security fixes for CVE-2026-42504 applied in versions: 3.11.3-r2
Security vulnerability affects the prometheus package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-12428
The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getallvalues function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permissioncallback only verifies the...
EUVD-2026-42561
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers t...
CVE-2026-2398
creationtimestamp| type| source ---|---|--- 2026-07-09 09:02:53+00:00| seen| https://gist.github.com/jenaiho/1522a468329f9f547ecf71750af6133b 2026-07-09 09:28:22+00:00| seen| https://gist.github.com/jenaiho/5dd59edf2dcf415acd7b0bfc401e6173 2026-07-10 22:42:22+00:00| seen|...
Improper Authentication
github.com/coder/coder is vulnerable to Improper Authentication. The vulnerability is due to improper OIDC email-based account linking and incorrect handling of the emailverified claim, which allows an attacker to authenticate with a malicious or unverified OIDC identity and take over another...
CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3
Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-LG10684 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r0
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin package. This issue is resolved in later releases. See references for vulnerability details...
libXfont2 PCF Font Parsing Heap Buffer Overflow
...
CVE-2026-11571
creationtimestamp| type| source ---|---|--- 2026-07-09 07:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq762jnkum25 2026-07-09 17:47:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6wauter26...
gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb
A heap buffer overflow vulnerability was found in GStreamer's librfb RFB/VNC client. The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a...
EUVD-2026-42538
The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
EUVD-2026-42529
Permissive Cross-Origin Resource Sharing CORS in the REST API helix-rest, org.apache.helix.rest.server.filters.CORSFilter in Apache Helix through 2.0.0 on all platforms allows a remote attacker controlling a web page visited by an authorized user to read responses from and issue cross-origin...
CVE-2026-57031
creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:37+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709...
CVE-2026-51536
creationtimestamp| type| source ---|---|--- 2026-07-09 03:32:56+00:00| seen| https://gist.github.com/MrAlaskan/e160c626a32e03e5d9eddaa732560672 2026-07-14 14:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh44rhv52r...
CVE-2026-44934
creationtimestamp| type| source ---|---|--- 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mq6ov4q7ot2f 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ov5pniv27...
SUSE CVE-2026-60002
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. This outcome occurs only on the client side...
GHSA-6828-FJ37-MVWR vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-gcp, linux-azure, linux-qemu-melange...