CVE-2026-48587

CVE-2026-48587 affects Django 5.2 before 5.2.15 and 6.0 before 6.0.6. The flaw in django.utils.cache.has_vary_header() does not strip leading/trailing whitespace from the Vary header before comparison, enabling remote attackers to read cached responses by requesting URLs whose responses contain w...

CVE-2026-7666

Django 6.0 before 6.0.6 and 5.2 before 5.2.15 are affected. The SMTP email backend (django.core.mail.backends.smtp.EmailBackend) may reuse a partially-initialized connection after a failed STARTTLS handshake when fail_silently=True, allowing on-path attackers to read email content in cleartext. T...

CVE-2026-6873

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation concatenating the cookie name and salt argument, which allows a remote attacker to use a cookie in a context different from the one wher...

CVE-2026-35085

creationtimestamp| type| source ---|---|--- 2026-06-03 12:51:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf5lbwf2m2m 2026-06-08 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnsib2j5av2e 2026-07-03 23:47:31+00:00| seen|...

SUSE-SU-2026:2232-1 Security update for evince

This update for evince fixes the following issue - CVE-2026-46529: improper argument sanitization can lead to command injection bsc1265880...

CVE-2026-35085

CVE-2026-35085 describes a stack buffer overflow in gdv-serverconfig that can be exploited by a remote attacker authenticated with user privileges to achieve full system access as root. The CVE is rated HIGH (CVSS 4.0: 8.7) with NETWORK attack vector, low complexity, and requires low privileges; ...

CVE-2026-35084

A stack buffer overflow in the component dali-devconfig can be exploited remotely to escalate privileges. The vulnerability allows a remote attacker with user privileges to obtain full system access as root. The linked CVSS metrics indicate a high-severity issue (CVSS v4.0 base score 8.7; CVSS v3...

CVE-2026-35084 Stack buffer overflow in method dali-devconfig

A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root...

EUVD-2026-34078

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input...

CVE-2026-25259

Memory corruption while processing multiple IOCTL command for escape operations...

CVE-2026-25258

Memory corruption while processing IOCTL calls for escape operations...

CVE-2026-27145

creationtimestamp| type| source ---|---|--- 2026-06-03 09:00:04+00:00| seen| Telegram/5i-pTes7Ja8Uhuw9wP6auiAd2fWyZYO3DYvaqIbmREm4 2026-06-03 12:00:59+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2r6hlix2f 2026-06-09 12:00:55+00:00| seen|...

CVE-2026-9256 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2025-68886

creationtimestamp| type| source ---|---|--- 2026-06-03 04:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mne7whpdjd22...

CVE-2026-5191

creationtimestamp| type| source ---|---|--- 2026-06-03 03:57:24+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mne7qh6bvy24...

CVE-2026-9334

creationtimestamp| type| source ---|---|--- 2026-06-03 02:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne4fdfgs223...

CVE-2026-44654

creationtimestamp| type| source ---|---|--- 2026-06-03 02:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3rw5xa423...

CVE-2026-42504

creationtimestamp| type| source ---|---|--- 2026-06-03 02:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3ga4eue23 2026-06-03 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2rgkfkm2f 2026-06-04 06:00:20+00:00| seen|...

CVE-2026-9334

Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeysasarrayref is enabled. decodehv collapses duplicate object keys into an array reference under dupkeysasarrayref. The branch reached for a duplicate key tests SvTYPE oldvalue != SVtRV && SvTYP...

GHSA-5XX3-J724-WMX5 DesktopCommanderMCP is vulnerable to SSRF

A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37. This affects the function readFileFromUrl of the file src/tools/filesystem.ts of the component readfile. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote...