170104 matches found
VulnCheck KEV: CVE-2025-6068
The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption-title & data-caption-description HTML attributes in all versions up to, and including, 2.4.31 due to insufficient input...
UBUNTU-CVE-2026-80846
In the Linux kernel, the following vulnerability has been resolved: x...
UBUNTU-CVE-2026-80759
In the Linux kernel, the following vulnerability has been resolved: B...
CVE-2026-80825
In the Linux kernel, the following vulnerability has been resolved: w...
CVE-2026-80877
In the Linux kernel, the following vulnerability has been resolved: a...
CVE-2026-80910
In the Linux kernel, the following vulnerability has been resolved: A...
UBUNTU-CVE-2026-80810
In the Linux kernel, the following vulnerability has been resolved: i...
UBUNTU-CVE-2026-80819
In the Linux kernel, the following vulnerability has been resolved: B...
UBUNTU-CVE-2026-80771
In the Linux kernel, the following vulnerability has been resolved: H...
UBUNTU-CVE-2026-80766
In the Linux kernel, the following vulnerability has been resolved: H...
DEBIAN-CVE-2026-86219
Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...
DEBIAN-CVE-2026-82208
With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...
DEBIAN-CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
DEBIAN-CVE-2026-80229
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
DEBIAN-CVE-2026-19931
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...
DEBIAN-CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-82750
creationtimestamp| type| source ---|---|--- 2026-09-06 17:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7hbkjvxtt2exh 2026-09-06 20:01:32+00:00| seen| https://gist.github.com/ichintu/a881adf8939998cb9caa6fc0349d18b6...
CVE-2026-86297
creationtimestamp| type| source ---|---|--- 2026-09-06 17:13:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117225214266621343 2026-09-07 11:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117229527048942650 2026-09-07 11:30:28+00:00| seen|...
CVE-2026-19633
creationtimestamp| type| source ---|---|--- 2026-09-06 17:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muuhrvsj4b2r 2026-09-06 17:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cr3gxk6hh7vc3 2026-09-06 20:18:43+00:00| seen|...