262246 matches found
EUVD-2026-37651
Unauthenticated Cross Site Scripting XSS in Auto Repair = 22.6 versions...
EUVD-2026-37542
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-32652
creationtimestamp| type| source ---|---|--- 2026-06-17 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwvvb3cm2j...
CVE-2026-35069
creationtimestamp| type| source ---|---|--- 2026-06-17 18:16:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwb5s5iv2s...
CVE-2026-42055
creationtimestamp| type| source ---|---|--- 2026-06-17 17:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiunvadrb24 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen|...
ROOT-APP-MAVEN-CVE-2024-27309 CVE-2024-27309 in io.root.org.apache.kafka:kafka-metadata - Patched by Root
Root has patched CVE-2024-27309 in the io.root.org.apache.kafka:kafka-metadata package for Root:Maven. Multiple fixed versions available...
CVE-2026-9678
creationtimestamp| type| source ---|---|--- 2026-06-17 17:10:11+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiskw2as22g 2026-06-18 15:59:05+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n6k5o27...
CVE-2022-44462
creationtimestamp| type| source ---|---|--- 2026-06-17 16:27:22+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3moiq6fov5l2c...
CVE-2026-49268
creationtimestamp| type| source ---|---|--- 2026-06-17 15:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moimkre7522k 2026-06-18 17:05:17+00:00| seen| https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y 2026-06-22 00:31:29+00:00| seen|...
EUVD-2026-37739
picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run function, allowing attackers to achieve arbitrary code execution via exec. Attackers can craft malicious pickle files calling profile.runstatement to execute arbitrary...
CVE-2026-49081
creationtimestamp| type| source ---|---|--- 2026-06-17 14:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moikekc6sz2j...
CVE-2026-54807
creationtimestamp| type| source ---|---|--- 2026-06-17 14:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moijsmuwzq2j 2026-07-16 19:00:30+00:00| seen| Telegram/qbVPVzOZ-t5tkQsHPqjzf9oQcpaZWyf0b6GUkkIlr12jYk 2026-07-16 19:00:31+00:00| seen|...
CVE-2026-9591
Cross-site request forgery CSRF in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attacker to create or modify news items as an administrator via a crafted form submitted to /api/news-items, due to missing anti-CSRF protection...
DEBIAN-CVE-2026-49268
A remote attacker can inject LDAP special characters into the Distinguished Name DN construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. This allows an attacker to manipulate th...
GHSA-R47G-FVHR-H676 vulnerabilities
Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, gitlab-rails-ce, librechat, kibana, wazuh-dashboard, langfuse, gitlab-rails-ce-fips, nextcloud-server...
CVE-2026-48712 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, vitess...
Interpretation Conflict
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Interpretation Conflict in the image processing pipeline. An attacker can cause the model to interpret images differently from human expectations by...
ROOT-APP-MAVEN-CVE-2026-27314 CVE-2026-27314 in io.root.org.apache.cassandra:cassandra-all - Patched by Root
Root has patched CVE-2026-27314 in the io.root.org.apache.cassandra:cassandra-all package for Root:Maven. Multiple fixed versions available...
CVE-2026-47340
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...