1937 matches found
CVE-2026-23906 Apache Druid: Authentication Bypass via LDAP Anonymous Bind
Affected Products and Versions Apache Druid Affected Versions: 0.17.0 through 35.x all versions prior to 36.0.0 Prerequisites: druid-basic-security extension enabled LDAP authenticator configured Underlying LDAP server permits anonymous bind ...
CVE-2026-25223
creationtimestamp| type| source ---|---|--- 2026-02-03 22:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfetewlo2h...
CVE-2026-23009
creationtimestamp| type| source ---|---|--- 2026-01-25 15:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdb2mem7lr2c...
CVE-2026-1327
creationtimestamp| type| source ---|---|--- 2026-01-22 15:35:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczj6ptnps2i...
MiracleLinux 9 : firefox-102.3.0-6.el9.ML.1 (AXSA:2022-4111:35)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4111:35 advisory. Mozilla: Bypassing FeaturePolicy restrictions on transient pages CVE-2022-40959 Mozilla: Data-race when parsing non-UTF-8 URLs in threads...
CVE-2026-21223
creationtimestamp| type| source ---|---|--- 2026-01-16 22:50:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115907220915660437 2026-01-17 01:38:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcli34mgrn2x 2026-01-19 22:50:12+00:00| seen|...
CVE-2025-71140
creationtimestamp| type| source ---|---|--- 2026-01-14 15:35:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcffig7ar52c 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...
CVE-2021-31516
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...
CVE-2025-22194
creationtimestamp| type| source ---|---|--- 2026-01-01 04:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdkj4fr7a2m...
CVE-2025-15136
creationtimestamp| type| source ---|---|--- 2025-12-27 15:35:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115792262490505544 2025-12-28 13:37:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2gxepi5e2q 2025-12-29 02:27:47+00:00| seen|...
CVE-2025-8075
creationtimestamp| type| source ---|---|--- 2025-12-26 09:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauwwgf4hn2x 2025-12-26 09:07:43+00:00| seen| https://bsky.app/profile/potato.software/post/3mauwwh544e2r 2026-01-07 19:08:58+00:00| seen|...
CVE-2025-67899
creationtimestamp| type| source ---|---|--- 2025-12-15 19:35:51+00:00| seen| https://seclists.org/oss-sec/2025/q4/277 2025-12-20 02:01:34+00:00| seen| https://bsky.app/profile/slackers.it/post/3maf4d6dt3p2l 2025-12-21 10:46:14+00:00| seen|...
MAL-2025-178316 Malicious code in riya-35 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a888481bcacd2689e7a93a3ba9b2f71bfc8af820095623ad74b305b604be01dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-141507
Malicious code in hokage-35 npm...
Malicious code in riya-35 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a888481bcacd2689e7a93a3ba9b2f71bfc8af820095623ad74b305b604be01dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137044
Malicious code in riya-35 npm...
EUVD-2025-143519
Malicious code in alvino-35 npm...
EUVD-2025-140407
Malicious code in lia-35 npm...
Malicious code in rita-35 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef3d4d6b9e4e9ea19cb884050adfc3aa2516f5a24ee26bc89c3b0c1cb893e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...