16405 matches found
airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2026-26007 via cryptography (3.2.0)
cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...
askflow-cli (1.0.0), atlassian-jwt-auth (>=8.0.2, <=9.0.0) +68 more potentially affected by CVE-2026-26007 via cryptography (3.2.1)
cryptography PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - askflow-cli 1.0.0 - atlassian-jwt-auth =8.0.2, =0.0.9, =0.2.7a0, =0.0.2, =0.0.1a12, =0.6.0, =3.1.12, =2.1.0, =1.0.0, =0.0.19, =0.7.1,...
CVE-2026-21350 After Effects | NULL Pointer Dereference (CWE-476)
After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user...
CVE-2026-24491
creationtimestamp| type| source ---|---|--- 2026-02-10 15:42:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejcgokdxb2x...
CGA-8CHC-WMP5-4W83
Bulletin has no description...
BELL-CVE-2026-23102
Bulletin has no description...
BELL-CVE-2026-23078
Bulletin has no description...
CVE-2025-46404 affecting package lasso for versions less than 2.9.0-1
CVE-2025-46404 affecting package lasso for versions less than 2.9.0-1. An upgraded version of the package is available that resolves this issue...
DEBIAN-CVE-2026-2245
A vulnerability was identified in CCExtractor up to 183. This affects the function parsePAT/parsePMT in the library src/libccx/tstables.c of the component MPEG-TS File Parser. Such manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is...
DEBIAN-CVE-2026-24683
FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...
DEBIAN-CVE-2025-59024
Crafted delegations or IP fragments can poison cached delegations in Recursor...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
CVE-2026-22905
An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences e.g., /js/../cgi-bin/post.cgi, gaining unauthorized access to protected CGI endpoints and configuration downloads...
PT-2026-7083
An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences e.g., /js/../cgi-bin/post.cgi, gaining unauthorized access to protected CGI endpoints and configuration downloads...
CVE-2026-25592
Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...
CVE-2024-27078
creationtimestamp| type| source ---|---|--- 2026-02-06 13:45:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me6zzvrufd2z...
CVE-2025-34518
creationtimestamp| type| source ---|---|--- 2026-02-05 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-036-04...
CVE-2025-71193
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...
CVE-2026-25584
creationtimestamp| type| source ---|---|--- 2026-02-04 22:17:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2vpwhl3j23 2026-02-04 22:17:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2vqlgsmw2o...