RHEL 8 : vsftpd (RHSA-2026:4477)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:4477 advisory. The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd:...

CVE-2026-26127 .NET Denial of Service Vulnerability

...

CVE-2026-3845

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

CGA-4R8F-8QXP-XRGR

Bulletin has no description...

EulerOS 2.0 SP13 : net-snmp (EulerOS-SA-2026-1291)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp...

CVE-2025-38712 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38712 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38154

creationtimestamp| type| source ---|---|--- 2026-03-06 13:10:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgff4w63em24 2026-03-27 15:15:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mi2fvy5bw326 2026-03-31 20:00:00+00:00| seen|...

CVE-2018-25178

CVE-2018-25178 affects Easyndexer 1.0 and describes an arbitrary file download vulnerability in showtif.php. The issue allows unauthenticated attackers to download sensitive files by sending POST requests with arbitrary file paths in the file parameter, enabling access to configuration and initia...

CVE-2026-3616

creationtimestamp| type| source ---|---|--- 2026-03-06 04:53:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgejflwmdm2n...

CVE-2026-27137

creationtimestamp| type| source ---|---|--- 2026-03-06 01:19:17+00:00| seen| https://bsky.app/profile/golang.org/post/3mge5fq5pq22k 2026-03-06 22:57:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggfwv5h5x2u 2026-03-07 02:28:02+00:00| seen|...

CVE-2026-3257

creationtimestamp| type| source ---|---|--- 2026-03-05 05:55:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgc4fjwxo42x 2026-03-05 10:08:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mgckine2q422...

CVE-2026-23231

A flaw was found in the Linux kernel. A local attacker with CAPNETADMIN capabilities, or remote packet traffic, could exploit a use-after-free vulnerability in the nftablesaddchain function's error handling. Successful exploitation could lead to a kernel crash, resulting in a Denial of Service Do...

CVE-2026-2748

CVE-2026-2748 affects SEPPmail Secure Email Gateway prior to version 15.0.1. The issue is improper validation of S/MIME certificates issued for email addresses containing whitespace, which enables signature spoofing. Impact is limited to confidentiality/integrity as described, with no availabilit...

CVE-2019-1020018

creationtimestamp| type| source ---|---|--- 2026-03-02 13:40:32+00:00| seen| https://gist.github.com/alon710/2be2eef3d2f72ee7a6659927b87a04d3...

CVE-2026-20733

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03...

CVE-2026-25734 Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the RSE metadata of the WebUI where...

CVE-2026-27744

creationtimestamp| type| source ---|---|--- 2026-02-25 05:39:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxqfiqym2u 2026-02-25 18:12:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpbtcohfi2d 2026-03-09 00:00:00+00:00| seen|...

SUSE: Security Advisory (SUSE-SU-2026:0597-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-25802 New API has Potential XSS in its MarkdownRenderer component

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe operation occurs in component MarkdownRenderer.jsx, allowing for Cross-Site ScriptingXSS when the model outputs items containing tag. Version...

CVE-2026-26975

Music Assistant (open-source media library manager) versions 2.6.3 and earlier are affected by an unauthenticated, network-adjacent vulnerability enabling Remote Code Execution. The flaw arises from the music/playlists/update API, which can bypass .m3u extension enforcement and write files anywhe...