CVE-2024-10230

creationtimestamp| type| source ---|---|--- 2026-07-05 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpvlp7vtwv2s...

CVE-2026-14648

creationtimestamp| type| source ---|---|--- 2026-07-05 00:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpubwlkocb2t...

PT-2026-99052

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530698795 Crash type: Heap-buffer-overflow READ 1 Crash state: decode common resp decode common resp fuzzer.cc...

PT-2026-99053

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730553 Crash type: Heap-buffer-overflow READ 1 Crash state: decode common resp decode get error injection mode v1 resp decode get error injection mode v1 resp fuzzer.cc...

BELL-CVE-2026-57585

Bulletin has no description...

BELL-CVE-2026-47247

Bulletin has no description...

CVE-2026-14607

creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprl2pm32s2z...

CVE-2026-40914 vulnerabilities

Vulnerabilities for packages: wildfly...

SUSE-SU-2026:2742-1 Security update for pacemaker

This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression bsc1268381...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the PatternParser process. An attacker can access sensitive files or interact with internal systems by submitting crafted XML data that triggers external entity resolution. Details XXE Injection is ...

CVE-2026-47898

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

EUVD-2026-41517

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

CVE-2026-47898 Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

CVE-2026-47898

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

CVE-2026-47898

This CVE affects Lucene.Net.Analysis.Common (PatternParser) in Lucene.Net.Analysis.Common: vulnerable in versions prior to 4.8.0-beta00018. The connected Snyk entry confirms an XML External Entity (XXE) injection vulnerability, where crafted XML could trigger external entity resolution, enabling ...

DEBIAN-CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

DEBIAN-CVE-2026-11586

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages...

CVE-2026-54408

creationtimestamp| type| source ---|---|--- 2026-07-03 07:05:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy7nokut2p 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-13 03:37:06+00:00| seen|...

CVE-2026-11352

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can...

SUSE CVE-2026-56016

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...