3931 matches found
CVE-2017-11010
creationtimestamp| type| source ---|---|--- 2026-06-26 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5qx4u3622n...
CVE-2026-56411
creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncbgb2u2x...
CVE-2026-56407
creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncaeykp26 2026-07-21 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r62xrwa24...
CVE-2026-40702
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:14+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02 2026-06-25 22:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5izqllc72r...
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 26, 2026. The vulnerability in question...
BIT-NODE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...
CVE-2026-48931
A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
CVE-2026-4110
creationtimestamp| type| source ---|---|--- 2026-06-22 08:19:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouhaj45xz2s...
CVE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...
CVE-2026-48617
CVE-2026-48617 describes a flaw in Node.js permission model enforcement that allows bypass via path misvalidation in process.report.writeReport(), potentially affecting confidentiality and integrity under affected configurations. Affected: all supported Node.js release lines (22, 24, 26). Impact ...
EUVD-2026-34901
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance...
CVE-2026-49299
A flaw was found in OpenStack Neutron. The tagging controller incorrectly enforces plural policy action names for single-tag write operations, while the defined policy rules use singular names. This mismatch allows a project reader to bypass intended policy restrictions, enabling them to create a...
CVE-2026-46401
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session termination vulnerability where authentication tokens remain valid after user logout. This allows attackers who obtain valid tokens to maintain persistent access to...
CVE-2026-11401
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rdssuperuser, via a crafted function created by the...
CVE-2025-43289
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access sensitive user data...
CVE-2025-43451
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-46280
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...
CVE-2025-46307
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
