39327 matches found
ai.hyacinth.framework:core-service-config-server (>=0.5.8, <=0.5.21), com.alibaba.cloud:spring-cloud-alibaba-nacos-config-server (2.1.1.release) +10 more potentially affected by CVE-2026-40982 via org.springframework.cloud:spring-cloud-config-server (2.1.4.release)
org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - ai.hyacinth.framework:core-service-config-serve...
CVE-2026-41202
creationtimestamp| type| source ---|---|--- 2026-05-07 06:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlakynbolz2e 2026-05-07 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116532473442667986 2026-05-07 09:00:34+00:00| seen|...
webkitgtk: Processing maliciously crafted web content may disclose internal states of the app
A flaw was found in WebKitGTK. Processing malicious web content can cause a memory initialization issue due to improper memory handling and result in the disclosure of the internal states of the application...
ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +5598 more potentially affected by CVE-2026-42587 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.12.final)
io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-42587 Source advisory: SNYK:JAVA-IONETTY-16438931...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4655 more potentially affected by CVE-2026-42587 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42587 Source advisory: OSV:GHSA-F6HV-JMP6-3VWV...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4655 more potentially affected by CVE-2026-42585 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42585 Source advisory: GHSA-38F8-5428-X5CV...
PT-2026-38600
Name of the Vulnerable Software and Affected Versions gyoridavid short-video-maker versions prior to 1.3.5 Description A path traversal flaw exists in the REST API component within the src/server/routers/rest.ts file. A remote attacker can exploit this by manipulating the req.params.tmpFile...
PT-2026-38614
Name of the Vulnerable Software and Affected Versions Cinny versions prior to 4.10.3 Description A remote authenticated attacker who shares a room with a victim and has permissions to create room emotes can cause the victim's client to send their Matrix access token to an attacker-controlled...
Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2025-2302 Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability May 7, 2026 CVE Number CVE-2026-30814 SUMMARY A stack-based buffer overflow vulnerability exists in the tmpServer opcode 0x436 functionality of Tp-Link AX53 v1.0 1.3.1 Bui...
CVE-2026-46367
creationtimestamp| type| source ---|---|--- 2026-05-06 20:10:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9525-27vj-c8r8 2026-05-16 13:05:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxvqmi4nx2l...
CVE-2026-7978
Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...
CVE-2026-7978
Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...
CVE-2026-7049
creationtimestamp| type| source ---|---|--- 2026-05-06 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7abbghlf2g 2026-09-12 10:00:19+00:00| seen| https://t.me/shimiscyberworld/1128 2026-09-13 00:00:08+00:00| seen| https://t.me/shimiscyberworld/1128...
CVE-2026-43267
creationtimestamp| type| source ---|---|--- 2026-05-06 13:59:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6udzphak2i...
Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service
Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution CVE-2026-23950, CVE-2026-31802, CVE-2026-26960, CVE-2026-24842, CVE-2026-33228, CVE-2026-29786, CVE-2026-23745, CVE-2026-40175, GHSA-v8w9-8mx6-g223, CVE-2026-34601, CVE-2026-295...
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationRuntime and IntegrationServer operands that use Kafka connectors are vulnerable to loss of confidentiality (CVE-2025-12183, CVE-2025-66566)
Summary Java module lz4 is used by IBM App Connect Enterprise Certified Container when connecting to Kafka servers. IBM App Connect Enterprise Certified Container IntegrationRuntime and IntegrationServer operands that use Kafka connectors are vulnerable to loss of confidentiality. This bulletin...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of integrity, arbitrary code execution, denial of service and SSRF
Summary IBM App Connect Enterprise Certified Container Designer operands that use mapping assistance and Dashboard operands that use the App Connect Enterprise Agent are vulnerable to loss of integrity CVE-2026-28684, arbitrary code execution CVE-2026-28277, denial of service CVE-2026-40347 and...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality, denial of service and cross-site scripting
Summary IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality CVE-2026-41238, CVE-2026-41239, CVE-2026-41240, GHSA-39q2-94rc-95cp, denial of service CVE-2026-33151, CVE-2026-32288 and cross-site scripting CVE-2026-27142. This bulletin...
CVE-2026-41286
creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7ahe667o2h 2026-05-07 02:36:02+00:00| seen|...
