52140 matches found
EUVD-2026-67194
Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...
BELL-CVE-2026-74686 CVE-2026-74686 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-74674 CVE-2026-74674 does not affect BellSoft software
Bulletin has no description...
K000163109: Linux kernel vulnerability CVE-2026-53025
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is disconnected but its chardev is still opened by an application. When the application releases t...
CVE-2026-16643
A vulnerability exists in Drupal Lunr exposed filters (all versions) due to improper input validation within the exposed filters component. The security team has marked this project as unsupported because a known security issue remains unfixed by the maintainer. There is currently no information ...
CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...
NPM: Whistle vulnerable to path traversal
NPM: Whistle vulnerable to path traversal vulnerability discovered by ? in WordPress Npm whistle versions 2.10.3...
CVE-2026-12556
HP Easy Start for macOS versions prior to 2.16.7.260722 contain potential security vulnerabilities that may lead to escalation of privilege . HP's CVSS 4.0 rating is 7.7 (HIGH) , with a network attack vector, low complexity, and low privileges required, yielding high impact on the vulnerable syst...
BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...
K000163055: OpenSSH vulnerabilities CVE-2026-35386 and CVE-2026-35414
Security Advisory Description CVE-2026-35386 In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in...
PT-2026-80910
Name of the Vulnerable Software and Affected Versions HP Easy Start for macOS versions prior to 2.16.7.260722 Description Security flaws exist that could allow an attacker to perform escalation of privilege, which is the act of gaining higher-level permissions than those originally assigned to a...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +337 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: OSV:GHSA-2943-5XFG-GQ5F...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @aiqadam/qadam-json (0.1.6) +71 more potentially affected by CVE-2026-77413 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =5.0.0, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.0.2, =1.0.0, =1.0.0, =4.0.0, =5.4.0 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-19233338...
CVE-2026-16934
creationtimestamp| type| source ---|---|--- 2026-08-21 01:49:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtknfuvdj72k 2026-08-26 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtx5fbpcwr2u...
CVE-2026-63384
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader uses evtagdecodeint to decode an attacker-controlled uint32 payload length and returns it as a signed int. Values above INTMAX becom...
MINI-CM8R-HRJ4-GPF6
Bulletin has no description...
MINI-5WM4-7837-MHPW
Bulletin has no description...
MINI-J8VW-698W-P4RX
Bulletin has no description...