262279 matches found
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
GHSA-W573-9FFJ-6FF9 vulnerabilities
Vulnerabilities for packages: celeborn, spark, zookeeper, cassandra-reaper, zipkin, neo4j, solr, flyway, cassandra, wildfly, apache-activemq-artemis, kserve-modelmesh, druid, management-api-for-apache-cassandra-5.0, thingsboard, akhq, strimzi-kafka-operator, trino, apache-pulsar, apache-nifi,...
CVE-2017-20249
creationtimestamp| type| source ---|---|--- 2026-06-09 13:23:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuc5f4p2p24...
GHSA-Q834-8QMM-V933 vulnerabilities
Vulnerabilities for packages: azure-functions-host...
CVE-2026-46324
creationtimestamp| type| source ---|---|--- 2026-06-09 13:04:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnub4iiajl2o...
CVE-2026-46316
creationtimestamp| type| source ---|---|--- 2026-06-09 12:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuaopfmsc2r 2026-06-10 18:48:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxes76jgq2d 2026-06-11 06:51:55+00:00| seen|...
ROOT-APP-NPM-CVE-2026-29086 CVE-2026-29086 in @rootio/hono - Patched by Root
Root has patched CVE-2026-29086 in the @rootio/hono package for Root:npm. Multiple fixed versions available...
GHSA-G29C-RGQ6-GXGJ awxkit has a path traversal vulnerability
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...
CVE-2026-46322
In the Linux kernel, the following vulnerability has been resolved: tun: free page on buildskb failure in tunxdpone When buildskb fails in tunxdpone, the function sets ret to -ENOMEM and jumps to the out label, which returns without freeing the page that vhostnetbuildxdp allocated for the frame. ...
github.com/pallets/click: Pallets Click: Arbitrary command execution via command injection in click.edit()
A flaw was found in Pallets Click. This command injection vulnerability, located in the click.edit function, allows an attacker with an unprivileged account to execute arbitrary operating system OS commands. This could lead to unauthorized control over the affected system...
Exploit for Command Injection in Github Enterprise_Server
CVE-2026-3854 - GitHub Enterprise Server that allowed an Remot...
CVE-2026-42535
creationtimestamp| type| source ---|---|--- 2026-06-09 11:12:57+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mnu2uq6ygc2l 2026-06-09 12:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25 2026-06-09 18:00:00+00:00| seen|...
CVE-2026-49742 TYPO3 CMS - Broken Access Control in Media Module
Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer FAL via the Media Module. Since the fallback storage resolves paths relative to the server's document root, this could expose sensitive files such as log files. This...
CVE-2026-47352 TYPO3 CMS - Broken Access Control in Backend API
Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted file mounts or storages. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.50, 12.0.0-12.4.45,...
CVE-2025-40808
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions, SIPROTEC 5 6MD89 CP300 All versions, SIPROTEC 5 6MU85 CP300 All versions,...
CVE-2025-10263
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level...
CVE-2026-6899
Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate...
CVE-2026-34031
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to...