5370 matches found
CVE-2026-38564
creationtimestamp| type| source ---|---|--- 2026-04-10 18:47:12+00:00| seen| https://gist.github.com/NitayDariel/13f069c8a21a00354e093e3f0df3fdea...
CVE-2026-29129
Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.0.115. Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue...
EUVD-2025-209373
A cross-site scripting XSS vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2025-45806
A cross-site scripting XSS vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
SUSE-SU-2026:21153-1 Security update for pgvector
This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build bsc1258945. Changelog: Fixed Index Searches in EXPLAIN output for Postgres 18...
rrweb 安全漏洞
rrweb is an open-source web recording and playback tool developed by rrweb-io. Versions of rrweb prior to v2.0.0-alpha.18 contained security vulnerabilities, which were caused by insufficient input validation and could lead to cross-site scripting attacks...
CVE-2025-45806
A cross-site scripting XSS vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
EUVD-2026-20417
Cross-Site Request Forgery CSRF vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | Extensions: from n/a through = 2.5...
CVE-2026-27144
creationtimestamp| type| source ---|---|--- 2026-04-08 04:18:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixgtgp6sn25 2026-04-13 21:22:02+00:00| seen| Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ 2026-05-07 18:20:11+00:00| seen|...
GHSA-98F9-FQG5-HVQ5
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA...
GHSA-3JR7-6HQP-X679
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...
CVE-2026-34824
creationtimestamp| type| source ---|---|--- 2026-04-02 20:19:53+00:00| published-proof-of-concept| https://github.com/mesop-dev/mesop/security/advisories/GHSA-3jr7-6hqp-x679 2026-04-04 00:18:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimxjrefqh24 2026-04-04 01:18:11+00:00|...
GHSA-9Q5M-JFC4-WC92
creationtimestamp| type| source ---|---|--- 2026-04-02 17:37:18+00:00| seen| Telegram/asfs2UkHDA2dEAWxK7wNvn0OefGesF-RFz1ocNui3XpVnY...
CVE-2026-4282
creationtimestamp| type| source ---|---|--- 2026-04-02 14:18:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijfkqcg5o2q 2026-04-02 15:20:57+00:00| seen| Telegram/1FZmwvj65iY9NiI7VGWCBujhZKTilfhPPvdqi0EqVANQnis 2026-04-02 16:00:18+00:00| seen|...
CVE-2026-34595
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.70 and 9.7.0-alpha.18, an authenticated user with find class-level permission can bypass the protectedFields class-level permission setting on LiveQuery subscriptions. By...
CVE-2026-3546
creationtimestamp| type| source ---|---|--- 2026-03-31 18:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mieu4hq3rv2k...
Parse Server 安全漏洞
Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that supports Node.js. There were security vulnerabilities in versions of Parse Server prior to 8.6.70 and 9.7.0-alpha.18. These vulnerabilities stemmed from the possibility for...
ROOT-OS-ALPINE-318-CVE-2023-46847 CVE-2023-46847 in rootio-squid - Patched by Root
Root has patched CVE-2023-46847 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...