38129 matches found
CVE-2026-20297
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a user who holds a role that contains the editlocalapps and installapps capabilities could cause a legitimate app...
CVE-2026-52843
creationtimestamp| type| source ---|---|--- 2026-07-15 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp62h5zb32c 2026-07-15 19:03:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpfwtu5la2w...
CVE-2025-32781 Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId
Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...
CVE-2026-6423
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow4mqxk52f 2026-07-16 11:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr3rrtfjf2x 2026-07-16 14:24:17+00:00| seen|...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via XAML parsing in Windows Presentation Foundation WPF. An attacker can execute arbitrary code by supplying specially crafted XAML input that is processed by a vulnerable WPF application. Improper handling of...
CVE-2026-61613
Cursor: Cloud Agent browser sandbox escape where attacker-controlled web content inside the agent container could reach an unauthenticated local agent endpoint, allowing code execution and access to files, repository contents, environment variables, credentials, and GitHub App tokens. Fixed 2026-...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...
CVE-2026-53565
creationtimestamp| type| source ---|---|--- 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 16:15:15+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-702 2026-07-17 13:02:33+00:00| seen|...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via XAML parsing in Windows Presentation Foundation WPF. An attacker can execute arbitrary code by supplying specially crafted XAML input that is processed by a vulnerable WPF application. Successful...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via XAML parsing in Windows Presentation Foundation WPF. An attacker can execute arbitrary code by supplying specially crafted XAML input that is processed by a vulnerable WPF application. Successful...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...
K000161837: Out-of-band Security Notification (July 15, 2026)
Security Advisory Description On July 15, 2026, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles. Article CVE|...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...
CVE-2026-58077
creationtimestamp| type| source ---|---|--- 2026-07-15 13:25:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqot3gv3km2h 2026-07-15 13:30:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqotd5jryh2m...
CVE-2026-61451
creationtimestamp| type| source ---|---|--- 2026-07-15 12:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoqcmrt352o 2026-07-15 16:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4sg2vjg2n...
