262016 matches found
CVE-2026-8650
creationtimestamp| type| source ---|---|--- 2026-07-08 22:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq664wgups27...
CVE-2026-54781 CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced
CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token validation does not enforce SubjectConfirmation method URIs or holder-of-key proof keys in SamlSecurityTokenHandler, allowing holder-of-key downgrade or custom...
CVE-2026-52200
An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...
CVE-2026-55471
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10, org.hl7.fhir.utilities.XsltUtilities saxonTransform... overloads instantiated a bare net.sf.saxon.TransformerFactoryImpl without ACCESSEXTERNALDTD or ACCESSEXTERNALSTYLESHEET...
CVE-2026-54780
CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, the CoreWCF WS-Security 1.0 receive pipeline validates ds:SignedInfo SignatureMethod against the configured SecurityAlgorithmSuite but does not validate each ds:Reference...
CVE-2026-60104
creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24 2026-07-08 23:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z 2026-07-09 16:00:46+00:00| seen|...
Important: Red Hat Security Advisory: tomcat security, bug fix, and enhancement update
An update for tomcat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2017-17990
creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq64x7paqs2k...
CVE-2026-59879
creationtimestamp| type| source ---|---|--- 2026-07-08 21:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ma3dqe2i 2026-07-11 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqe7fxgexo2n...
CVE-2026-49471
creationtimestamp| type| source ---|---|--- 2026-07-08 21:42:03+00:00| seen| https://gist.github.com/alon710/faf458b17f73f7d92e775ebdde2a6b10 2026-07-08 22:35:03+00:00| published-proof-of-concept| https://github.com/oraios/serena/security/advisories/GHSA-37h2-6p4f-mp3q 2026-07-11 00:42:25+00:00|...
CVE-2026-59936
creationtimestamp| type| source ---|---|--- 2026-07-08 21:36:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq637k3iih2w 2026-07-10 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbnbfawqa2n 2026-07-10 07:43:10+00:00| seen|...
CVE-2026-54528
JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase in GitHandler.prepare in jupyterlabgit/handlers.py to enforce excludedpaths, allowing an authenticated user on a case-insensitive filesystem to vary URL path casing and read excluded...
CVE-2026-11827
GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user's stored credentials due to imprope...
CVE-2026-59818
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the...
GHSA-QPM9-H556-MWXM NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
Impact In versions up to and including 3.0.0, two parts of the GraphQL API returned data without checking whether the data belonged to the logged-in user: - Document content. A logged-in user could download the raw content of any document by its ID, regardless of who owned it. The resolver has...
CVE-2026-54528 jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase in GitHandler.prepare in jupyterlabgit/handlers.py to enforce excludedpaths, allowing an authenticated user on a case-insensitive filesystem to vary URL path casing and read excluded...
CVE-2026-59818
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the...
CVE-2026-15169 Heap-based Buffer Overflow in Wireshark
UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...
