DEBIAN-CVE-2026-44919

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL...

CVE-2026-32934

creationtimestamp| type| source ---|---|--- 2026-05-05 21:38:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55jcl3da2v...

CVE-2026-42232

creationtimestamp| type| source ---|---|--- 2026-05-04 04:17:35+00:00| seen| https://bsky.app/profile/cyberlensai.bsky.social/post/3mkysuwbk3e2z 2026-05-04 21:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2lbe4trm2t 2026-05-05 07:14:35+00:00| seen|...

Mozilla Firefox < 150.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 150.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-35 advisory. - Memory safety bugs present in Firefox ESR 140.10.0 and Firefox 150.0.0. Some of these bugs showed evidence...

Mozilla Firefox < 150.0.1

The version of Firefox installed on the remote Windows host is prior to 150.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-35 advisory. - Memory safety bugs present in Firefox ESR 140.10.0 and Firefox 150.0.0. Some of these bugs showed evidence of memory...

PT-2026-42282

Name of the Vulnerable Software and Affected Versions XCP-ng affected versions not specified XenServer affected versions not specified Xen XAPI affected versions not specified Description A role-based access control RBAC flaw exists in the Xen XAPI subsystem, specifically within the system...

GHSA-G99W-PRQ5-29C6

creationtimestamp| type| source ---|---|--- 2026-04-17 21:23:35+00:00| seen| Telegram/Q64crjFZRAFhidSIvAgPD7j9KS4Pns0gYZhyfeiZ9MDp9II...

CVE-2026-20136

creationtimestamp| type| source ---|---|--- 2026-04-15 18:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjwvn37e2t 2026-07-03 10:46:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqelg5ydk2w...

CVE-2025-40899

creationtimestamp| type| source ---|---|--- 2026-04-15 13:20:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjyeesk4e2o 2026-04-15 17:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjken4pvfd2a 2026-04-17 17:30:59+00:00| published-proof-of-concept|...

CVE-2026-5815

creationtimestamp| type| source ---|---|--- 2026-04-08 15:40:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116369839554011068 2026-04-09 00:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizix2d4o42j 2026-04-09 01:28:42+00:00| seen|...

GHSA-H7HG-F7CW-9XWC

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo...

GHSA-J3VJ-59VV-H4RC

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo...

CVE-2026-34890

creationtimestamp| type| source ---|---|--- 2026-04-02 14:35:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijgi2iuvz2q 2026-04-07 21:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miwpyfpbu62x...

CVE-2026-2233

creationtimestamp| type| source ---|---|--- 2026-03-26 14:47:35+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhxtvifkikt2...

CVE-2026-23921

creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r 2026-03-31 05:44:07+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3midhua6x3s22 2026-04-01 08:26:38+00:00| seen|...

CVE-2026-23923

creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r...

CVE-2026-33163

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.35 and 8.6.50, when a Parse.Cloud.afterLiveQueryEvent trigger is registered for a class, the LiveQuery server leaks protected fields and authData to all subscribers of that...

CVE-2026-33154

creationtimestamp| type| source ---|---|--- 2026-03-18 20:08:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pxrr-hq57-q35p 2026-03-20 21:22:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjh6ckfsh2f 2026-04-03 03:00:04+00:00|...

CVE-2026-32308

creationtimestamp| type| source ---|---|--- 2026-03-12 08:27:37+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-wvh5-6vjm-23qh 2026-03-12 22:35:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvhjztzdd2d 2026-03-18 06:00:14+00:0...

CVE-2026-23906

Affected Products and Versions Apache Druid Affected Versions: 0.17.0 through 35.x all versions prior to 36.0.0 Prerequisites: druid-basic-security extension enabled LDAP authenticator configured Underlying LDAP server permits anonymous bind Vulnerability Description An authentication bypass...