CVE-2026-34373 Parse Server: GraphQL API endpoint ignores CORS origin restriction

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the allowOrigin server option and unconditionally allows cross-origin requests from any website. This...

CVE-2026-1877

creationtimestamp| type| source ---|---|--- 2026-03-31 10:05:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midwhd4tj22t...

CVE-2026-35665

creationtimestamp| type| source ---|---|--- 2026-03-30 18:32:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6m8-cqvj-pg5v 2026-04-10 18:30:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xduwea22t...

CVE-2026-4519 affecting package python3 for versions less than 3.12.9-10

CVE-2026-4519 affecting package python3 for versions less than 3.12.9-10. A patched version of the package is available...

CVE-2026-5007

creationtimestamp| type| source ---|---|--- 2026-03-28 20:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5gu4g5pn2i...

EUVD-2016-10845

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return...

CVE-2016-20045

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return...

CVE-2016-20045 HNB Organizer 1.9.18-10 Local Buffer Overflow via -rc Parameter

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return...

CVE-2016-20045

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return...

PT-2026-28228

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return...

HNB Organizer 缓冲区错误漏洞

HNB Organizer is a personal information management and note organization tool developed by HNB Corporation. Version 1.9.18-10 of HNB Organizer contains a buffer overflow vulnerability. This vulnerability stems from a local buffer overflow, which may allow local attackers to execute arbitrary code...

opencryptoki security update

An update is available for opencryptoki. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The opencryptoki packages contain version 2.11 of the PKCS11 API,...

vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

nginx security update

An update is available for nginx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a...

AlmaLinux 10 : golang (ALSA-2026:5941)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:5941 advisory. cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive CVE-2025-61731 net/url: Incorrect parsing of IPv6 host literals in net/url...

RockyLinux 10 : opencryptoki (RLSA-2026:4717)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4717 advisory. openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following CVE-2026-23893 Tenable has extracted the preceding description block...

Oracle Linux 10 : ncurses (ELSA-2026-5913)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5913 advisory. 6.4-15.20240127 - fix buffer overflow in infocmp -i CVE-2025-69720 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

RockyLinux 10 : kernel (RLSA-2026:4723)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4723 advisory. kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service CVE-2026-23010 Tenable has extracted the preceding description bloc...

AlmaLinux 10 : ncurses (ALSA-2026:5913)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:5913 advisory. ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. CVE-2025-69720 Tenable has extracted the preceding description block directl...