DEBIAN-CVE-2026-59638

In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24...

CVE-2026-59652

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

CVE-2026-18581

The CVE-2026-18581 entry concerns ggml-org llama.cpp (e15efe0) and affects the Jinja Minja Template Parser component, specifically the file common/jinja/parser.cpp. The issue arises from manipulating input {{9|9|{}, which can trigger a reachable assertion. Exploitation requires local access, and ...

CVE-2015-3269

creationtimestamp| type| source ---|---|--- 2026-08-02 14:43:02+00:00| seen| https://t.me/informationsec/287 2026-08-03 02:05:52+00:00| seen| https://t.me/informationsec/287...

Linux Distros Unpatched Vulnerability : CVE-2026-66402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and...

CVE-2026-67324

creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwsslzq22 2026-08-01 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2eglt7fr2t 2026-08-01 22:22:01+00:00| seen|...

CVE-2019-14615

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:04+00:00| seen| https://t.me/nonamepodcast/74 2026-08-02 00:00:20+00:00| seen| https://t.me/nonamepodcast/74...

CVE-2026-66402

FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...

CVE-2026-66402

FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...

EUVD-2026-51851

FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...

CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass

FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...

CVE-2026-66402

CVE-2026-66402 affects FreeRDP up to and including 3.28.x, fixed in 3.29.0. The issue arises from TLS identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_utils_get_dns_names(). FreeRDP uses custom Common Name and DNS SAN matching instead of OpenSSL’s length-...

CVE-2026-54787

creationtimestamp| type| source ---|---|--- 2026-07-31 22:32:31+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:23+00:00| seen|...

DEBIAN-CVE-2026-62867

Bulletin has no description...

ROOT-APP-NPM-CVE-2024-29409 CVE-2024-29409 in @rootio/nestjs__common - Patched by Root

Root has patched CVE-2024-29409 in the @rootio/nestjscommon package for Root:npm. Multiple fixed versions available...

UBUNTU-CVE-2026-61893

A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an...

SUSE CVE-2026-49245

unknown...

Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

Summary image.download fetches a URL and writes the response to disk. It does not use the central path guard validatepathwithenvconfig, which confines writes to FLYTOSANDBOXDIR; instead it confines the output to outputdir, but outputdir is itself a caller parameter. Since the attacker sets both t...

CLEANSTART-2026-TR90585 Security fixes in terragrunt-fips 0.97.2-r3

Package terragrunt-fips version 0.97.2-r3 fixes 3 vulnerabilities: CVE-2026-34986, ghsa-xmrv-pmrh-hhx2, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-ZY97357 Security fixes in cloudprober-fips 0.13.9-r0

Package cloudprober-fips version 0.13.9-r0 fixes 8 vulnerabilities: CVE-2026-34986, ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-hfvc-g4fc-pqhx...