CVE-2026-0163

creationtimestamp| type| source ---|---|--- 2026-08-04 19:21:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117038861597097181 2026-08-04 21:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhpxgff2u 2026-08-05 10:34:59+00:00| seen|...

PYSEC-2026-3587 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Summary Heap-buffer-overflow READ 16 bytes in Gemm76::adaptgemm76 onnx/versionconverter/adapters/gemm76.h:41 when ConvertVersion processes a model with a Gemm node whose input tensors have fewer than 2 dimensions. The adapter accesses Bshape1 without checking rank. On Release builds the OOB read ...

CVE-2026-8508

creationtimestamp| type| source ---|---|--- 2026-08-04 09:56:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117036637521846673 2026-08-17 18:00:04+00:00| seen| Telegram/2uUwMFxsoKhD8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw 2026-08-17 18:00:05+00:00| seen|...

CVE-2026-59639

creationtimestamp| type| source ---|---|--- 2026-08-04 09:28:18+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117036528234088485...

CVE-2026-15958

creationtimestamp| type| source ---|---|--- 2026-08-04 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117036064825025921 2026-08-04 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpnktkd32f...

Key Exchange without Entity Authentication

Overview Affected versions of this package are vulnerable to Key Exchange without Entity Authentication due to disabled SSH host key verification in the EMR SSH helper commands. An attacker can intercept SSH sessions and file transfers by performing a man-in-the-middle attack between the client a...

CVE-2026-18738

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering...

EUVD-2026-52439

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering...

CVE-2026-18654

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To...

CVE-2026-18651

creationtimestamp| type| source ---|---|--- 2026-08-03 16:00:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032406804696114...

CVE-2026-20465

creationtimestamp| type| source ---|---|--- 2026-08-03 15:46:48+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032354304920286...

CVE-2026-20464

creationtimestamp| type| source ---|---|--- 2026-08-03 15:33:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032302879027594...

CVE-2026-33591

creationtimestamp| type| source ---|---|--- 2026-08-03 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117031464187150211 2026-08-03 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms6h6fbd2l2i 2026-08-05 13:00:07+00:00| seen|...

CVE-2026-9593

creationtimestamp| type| source ---|---|--- 2026-08-03 06:30:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/117030168375818784...

CVE-2026-8763

creationtimestamp| type| source ---|---|--- 2026-08-03 06:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030049213840403 2026-08-03 06:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms5t2wluuw2j 2026-08-03 20:58:03+00:00| seen|...

CVE-2026-59650

Bouncy Castle for Java up to 1.84 (and Java LTS up to 2.73.11) is affected by CVE-2026-59650: MTI/A0 DH key exchange exponentiates an unvalidated peer value. This can impact confidentiality and integrity as described in the CVE, with overall severity listed as CRITICAL (CVSS 9.3). The issue is fi...

PT-2026-67243

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-18280

creationtimestamp| type| source ---|---|--- 2026-08-02 15:30:52+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117026629340357922...

CVE-2026-18282

creationtimestamp| type| source ---|---|--- 2026-08-02 15:20:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117026576569644828...

Remote Denial Of Service (Dos)

github.com/pion/dtls is vulnerable to Remote Denial of Service Dos. The vulnerability is due to improper parsing of a crafted ECDHEPSK ServerKeyExchange message, which allows a remote attacker to trigger a panic...