Linux Distros Unpatched Vulnerability : CVE-2026-45673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver...

EulerOS Virtualization 2.13.1 : libpng (EulerOS-SA-2026-2375)

According to the versions of the libpng packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

EulerOS Virtualization 2.13.0 : curl (EulerOS-SA-2026-2397)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcu...

CVE-2026-53510

creationtimestamp| type| source ---|---|--- 2026-06-11 23:20:00+00:00| seen| https://bsky.app/profile/connorshea.bsky.social/post/3mo2egnpf5s2u 2026-07-31 21:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtx6byfe2g 2026-07-31 21:49:24+00:00| seen|...

CVE-2026-2827

creationtimestamp| type| source ---|---|--- 2026-06-11 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo2e7qfedx2w...

CVE-2026-53782

creationtimestamp| type| source ---|---|--- 2026-06-11 22:23:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2bb7d2k425...

CVE-2026-44249

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo. Valid public IP addresses ca...

CVE-2026-12016

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-53814

creationtimestamp| type| source ---|---|--- 2026-06-11 22:05:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2abiyinf23 2026-06-14 15:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moazwexoxx2y...

CVE-2026-53818

creationtimestamp| type| source ---|---|--- 2026-06-11 21:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo27sutc2u2g...

CVE-2026-53809

creationtimestamp| type| source ---|---|--- 2026-06-11 21:47:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo27axk7bm23...

CVE-2026-12012

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: High...

GHSA-G628-R368-6VH7 GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection

Summary Administrator can perform JNDI attack through specially crafted DB2 jdbc url leading to Remote Code Execution RCE. Impact If GeoServer has DB2 extension installed, this vulnerability can lead to executing arbitrary code. Details Authenticated users can access Vector Data Sources page to...

GHSA-HMRH-MQV8-RVVR vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-52858

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...

UBUNTU-CVE-2026-52858

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...

EUVD-2026-36290

In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy workflow runs with package-write permissions and deployment secrets. If an attacker can make a pull request build satisf...

CVE-2026-52858

Vim before 9.2.0561 is vulnerable via Python omni-completion (python3complete.vim for +python3, and legacy pythoncomplete.vim for +python) where the current buffer’s sys.path allows importing and executing a sibling package’s top-level code when opening a hostile .py file. Root cause: omni-comple...

CVE-2026-47162

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in the netrw plugin runtime/pack/dist/opt/netrw/autoload/netrw.vim when serializing browsed directory paths to the history file /.vim/.netrwhist. A...

CVE-2026-47167

Vim has a code injection vulnerability in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) affecting builds with +ruby support prior to version 9.2.0496. A crafted step-definition regex pulled from .rb files under features// or stories/ / directories is embedded into a Ruby Kernel.eva...