260898 matches found
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...
CVE-2026-10723 affecting package bind for versions less than 9.20.26-1
CVE-2026-10723 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7
CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7. A patched version of the package is available...
CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7
CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7. A patched version of the package is available...
CVE-2026-56852 affecting package jx for versions less than 3.10.182-5
CVE-2026-56852 affecting package jx for versions less than 3.10.182-5. A patched version of the package is available...
CVE-2026-67428
creationtimestamp| type| source ---|---|--- 2026-07-29 20:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrspokmwlf2g 2026-07-30 16:30:59+00:00| seen| https://gist.github.com/alon710/abbfb678b2ea15b959183e89124a0f42 2026-07-30 16:35:05+00:00| published-proof-of-concep...
EUVD-2026-50483
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view project import source information due to a missing authorization check...
CVE-2026-14529
creationtimestamp| type| source ---|---|--- 2026-07-29 18:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrslmntmrs2r 2026-07-30 04:47:07+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730 2026-07-30 06:00:27+00:0...
CVE-2026-52841
creationtimestamp| type| source ---|---|--- 2026-07-29 18:35:16+00:00| published-proof-of-concept| https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-8hm4-r66f-29wr 2026-07-30 03:31:37+00:00| seen| https://gist.github.com/alon710/555463e864b3e92acb0ee1bba5502d4f...
CVE-2026-13346
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...
CVE-2026-67424
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/modules/atomic/http/get.py, src/core/modules/atomic/http/request.py, and src/core/modules/atomic/http/batch.py validate only the initial...
DEBIAN-CVE-2026-59900
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter fails to deduplicate or validate Host headers when an HTTP/2 client...
CVE-2026-59899
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-54727
creationtimestamp| type| source ---|---|--- 2026-07-29 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b 2026-07-29 18:35:08+00:00| published-proof-of-concept| https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f 2026-07-30 00:32:17+00:0...
EUVD-2026-50421
MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text and \mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarku...
DEBIAN-CVE-2026-67194
Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...
CVE-2026-54693
ZITADEL is an open source identity management platform. From 2.43.0 through 2.71.19, from 3.0.0 until 3.4.11, and from 4.0.0 until 4.15.1, the email and phone self-management API paths in internal/command/userv2email.go, internal/command/userv2phone.go, and internal/command/userv2human.go allowed...
Logging operator has Fluentd configuration injection that allows remote code execution
Summary The Fluentd configuration renderer in Logging operator writes strings from CRDs such as Flow directly into fluent.conf without escaping them. As a result, a user who can create Flow resources can inject Fluentd configuration by providing values that contain newlines. In the confirmed path...
GHSA-MJQF-28PH-426H Logging operator has Fluentd configuration injection that allows remote code execution
Summary The Fluentd configuration renderer in Logging operator writes strings from CRDs such as Flow directly into fluent.conf without escaping them. As a result, a user who can create Flow resources can inject Fluentd configuration by providing values that contain newlines. In the confirmed path...
