5715 matches found
CVE-2026-7491
creationtimestamp| type| source ---|---|--- 2026-04-30 02:37:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10897-64257-2.html...
CVE-2026-7489
creationtimestamp| type| source ---|---|--- 2026-04-30 02:20:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html...
CVE-2026-42249
creationtimestamp| type| source ---|---|--- 2026-04-29 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-42248 2026-04-29 15:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknfdxk62b2n 2026-05-10 11:02:26+00:00| seen|...
CVE-2026-7336
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-03 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260504 2026-05-08...
CVE-2026-7338
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-03 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260504 2026-05-10...
CVE-2026-7340
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-03 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260504...
DEBIAN-CVE-2026-6238
The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...
CVE-2026-6238
The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...
CVE-2026-40556
creationtimestamp| type| source ---|---|--- 2026-04-28 06:20:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-40556 2026-04-28 16:50:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl25fsldf2o...
PT-2026-35750
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.2 through 2.33 GNU C Library version 2.34 affected versions not specified Description The deprecated functions ns printrrf, ns printrr, and fp nquery fail to validate RDATA content against the RDATA length in a DNS...
GNU C Library 安全漏洞
The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.2 and later contain security vulnerabilities. These vulnerabilities arise when functions such as nsprintrrf, nsprintrr, and fpnquery handle...
JLSEC-2026-223 openssl-src NULL pointer Dereference in `signature_algorithms` processing
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension where it was present in the initial ClientHello, but includes a signaturealgorithmscert extension then a NU...
CVE-2026-29181 vulnerabilities
Vulnerabilities for packages: podman, prometheus, kubevirt-cdi-operator, k6-fips, crossplane-provider-azure-operationalinsights, kubernetes-csi-livenessprobe, blob-csi-fips, kubernetes-csi-driver-hostpath, dataplaneapi-fips, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-kafka,...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: xeol, cert-manager, frp, nuclei, external-secrets-operator, percona-server-mongodb-operator, flux, ratify, gitlab-runner, gitea, cert-manager-istio-csr, spqr, kyverno-notation-aws, minio, rancher-agent, kyverno, trufflehog, sftpgo-plugin-auth, grafana, seaweedfs,...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: external-secrets-fips, openbao, beats, k6-fips, rclone-fips, cert-manager-cmctl, external-secrets-operator-fips, percona-server-mongodb-operator-fips, juicefs, opentofu, telegraf, seaweedfs-rocksdb, beats-fips, agentbeat, gitlab-runner-fips, elastic-agent, trufflehog...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: external-secrets-fips, openbao, beats, k6-fips, rclone-fips, cert-manager-cmctl, external-secrets-operator-fips, percona-server-mongodb-operator-fips, juicefs, opentofu, telegraf, seaweedfs-rocksdb, beats-fips, agentbeat, gitlab-runner-fips, elastic-agent, trufflehog...
CVE-2026-4313
creationtimestamp| type| source ---|---|--- 2026-04-24 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4313...
CVE-2026-6887
creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116453554799004892 2026-04-23 10:30:31+00:00| seen|...
SUSE SLES16 Security Update : strongswan (SUSE-SU-2026:21203-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21203-1 advisory. Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When...