4123 matches found
CVE-2026-29111 affecting package systemd for versions less than 250.3-24
CVE-2026-29111 affecting package systemd for versions less than 250.3-24. A patched version of the package is available...
CVE-2026-31049
An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field...
CVE-2026-34238
creationtimestamp| type| source ---|---|--- 2026-04-14 01:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg7unxtcr23 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...
RHSA-2026:7670 Red Hat Security Advisory: nodejs:24 security update
Bulletin has no description...
GHSA-3RV7-9FHX-J654
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...
GO-2026-4888 Fleet: Password reset tokens remain valid after password change for 24 hours in github.com/fleetdm/fleet
Fleet: Password reset tokens remain valid after password change for 24 hours in github.com/fleetdm/fleet. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
CVE-2026-23411
creationtimestamp| type| source ---|---|--- 2026-04-01 11:25:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miglfjzl5p22 2026-04-02 17:37:03+00:00| seen| Telegram/37miVMXR04DKfwyt7TTlg-rZzunXudUntV94ZrNBpzOyTo 2026-04-07 18:00:00+00:00| seen|...
@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (=0.8.3-beta.1) +11 more potentially affected by CVE-2026-33580 via openclaw (>=2026.3.22 <=2026.3.24)
openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-33580 Source advisory: SNYK:JS-OPENCLAW-15857174...
@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (=0.8.3-beta.1) +11 more potentially affected by CVE-2026-33577 via openclaw (>=2026.3.22 <=2026.3.24)
openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-33577 Source advisory: SNYK:JS-OPENCLAW-15857169...
UBUNTU-CVE-2026-33982
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpralignedoffsetrecalloc. This issue has been patched in version 3.24.2...
EUVD-2026-17225
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpralignedoffsetrecalloc. This issue has been patched in version 3.24.2...
EUVD-2026-17174
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
ALPINE-CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
UBUNTU-CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
Node.js 安全漏洞
Node.js is an open-source, cross-platform JavaScript runtime environment developed by the Node.js community. Versions 20.x, 22.x, 24.x, and 25.x of Node.js have security vulnerabilities. These vulnerabilities stem from HMAC verification using a comparison that does not maintain constant time, whi...
CVE-2026-32538 WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Mailer: from n/a through = 1.1.24...
CVE-2026-27651
creationtimestamp| type| source ---|---|--- 2026-03-24 23:02:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtoniqce52x 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 14:35:13+00:00| seen|...
CVE-2026-3912
creationtimestamp| type| source ---|---|--- 2026-03-24 22:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnm24gdn2g...
CVE-2026-4433
creationtimestamp| type| source ---|---|--- 2026-03-24 22:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtmjja5tt2i 2026-03-25 14:35:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqq6ubg2b...