DEBIAN-CVE-2026-31443

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is not supported by the hardware, and an error that causes Function Level Reset FLR is received, the driver will try to restore the...

DEBIAN-CVE-2026-31432

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERYINFO for compound requests When a compound request such as READ + QUERYINFOSecurity is received, and the first command READ consumes most of the response buffer, ksmbd could write beyond the allocated...

CVE-2026-23752

creationtimestamp| type| source ---|---|--- 2026-04-20 19:58:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxawex4jp2h...

CVE-2026-31429

creationtimestamp| type| source ---|---|--- 2026-04-20 11:37:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwew4fcs32k 2026-04-24 09:00:04+00:00| published-proof-of-concept| Telegram/eiq80vTfK0uEvpSaVkLstXl9YEDfyEgGUyA39bKhe3J3sOM 2026-04-24 21:00:04+00:00|...

CVE-2026-3517

creationtimestamp| type| source ---|---|--- 2026-04-20 11:13:25+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-371 2026-04-20 15:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwt7avbvg2e 2026-04-20 17:21:16+00:00| seen|...

CVE-2026-31317

creationtimestamp| type| source ---|---|--- 2026-04-17 18:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpjen3chh22 2026-04-20 20:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxbyegapb2q...

CVE-2026-41269

creationtimestamp| type| source ---|---|--- 2026-04-15 21:42:59+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rh7v-6w34-w2rr 2026-04-23 21:26:31+00:00| seen| Telegram/BiTM4VWQdbYmMG43-mv447qo5-YjFbOvUme2BKAYDCNPPw...

CVE-2026-20152

creationtimestamp| type| source ---|---|--- 2026-04-15 19:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmbzpqxh2o 2026-04-16 17:19:57+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116415528739254723 2026-04-16 18:00:00+00:00| seen|...

CVE-2026-6317

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkt5v4i6i2r 2026-04-15 23:27:00+00:00|...

bind9.18 security update

An update is available for bind9.18. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Na...

BELL-CVE-2026-23425

Bulletin has no description...

CVE-2025-11717

creationtimestamp| type| source ---|---|--- 2026-04-13 17:58:56+00:00| seen| Telegram/IuYToep-QLYvNUx4J0hYJ6AdyuytyxlIKzEtVTkECocrRgQ...

CVE-2026-6115

creationtimestamp| type| source ---|---|--- 2026-04-12 05:43:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnfgvly42a 2026-04-12 05:45:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnk7aa732h 2026-04-12 06:25:52+00:00| seen|...

africa.shuwari.sbt:sbt-js_2.12_1.0 (>=0.14.1 <=0.16.1), africa.shuwari.sbt:sbt-netbeans_2.12_1.0 (>=0.1.0 <=0.1.1) +21863 more potentially affected by CVE-2026-34480 via org.apache.logging.log4j:log4j-core (>=2.0-alpha1 <=2.25.3)

org.apache.logging.log4j:log4j-core MAVEN version =2.0-alpha1, =0.14.1, =0.1.0, =0.9.6, =0.12.0, =0.9.6, =0.9.6, =0.9.6, =0.9.6, =0.14.1, =0.9.6, =0.14.1, =4.4.0.0, =1.4.6, =1.4.6, =1.4.8 and more Source cves: CVE-2026-34480 Source advisory: SNYK:JAVA-ORGAPACHELOGGINGLOG4J-15967769...

CVE-2026-5813 PHPGurukul Online Course Registration check_availability.php sql injection

A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /checkavailability.php. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

PT-2026-31450

Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versions 1.15.0 through 1.42.0 Description The fix for a previous issue changed the path used for one command but left another command vulnerable to a PATH hijacking attack on BSD and Solaris platforms. Specifically, the kenv...

CVE-2026-24450

creationtimestamp| type| source ---|---|--- 2026-04-07 14:30:28+00:00| seen| https://infosec.place/objects/29afbc8a-5592-4e64-8450-859a4223cef1 2026-04-07 15:28:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3s5o2cj2s 2026-04-07 17:28:45+00:00|...

CVE-2026-35167

creationtimestamp| type| source ---|---|--- 2026-04-06 19:29:44+00:00| seen| Telegram/RmP7l-K41x9UoCBscD5W8eizA4yDJaPJqAKKOeWwXNyu-8 2026-04-14 16:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjhr7bb5qx2l...

DEBIAN-CVE-2026-35177

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280...

CVE-2026-21375

creationtimestamp| type| source ---|---|--- 2026-04-06 16:26:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitoksguyq2x 2026-04-06 17:32:14+00:00| seen| Telegram/nEWPFpjCLkD7NyFP9hUQCVBBOcgamDzuZpgMFfkUJdzCqg 2026-04-09 01:40:09+00:00| seen|...