16591 matches found
GHSA-3FMP-59V6-4QW2
creationtimestamp| type| source ---|---|--- 2026-07-06 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870089136632895 2026-07-06 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpwrvj6vez2g...
PT-2026-55885
Name of the Vulnerable Software and Affected Versions Apache Camel versions 3.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An issue exists in the Apache Camel JMS component where the JmsBinding.extractBodyFromJms function i...
CVE-2026-14751
creationtimestamp| type| source ---|---|--- 2026-07-05 14:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116867729198058639 2026-07-05 14:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpvqedifzs2h 2026-07-05 16:20:41+00:00| seen|...
CVE-2026-14738
creationtimestamp| type| source ---|---|--- 2026-07-05 11:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116867021281566995 2026-07-05 11:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpvgcg262i25 2026-07-05 12:21:46+00:00| seen|...
CVE-2026-14781
creationtimestamp| type| source ---|---|--- 2026-07-05 08:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116866313382807189 2026-07-05 08:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpv4aipdkd2o 2026-07-05 09:51:39+00:00| seen|...
CVE-2026-14721
creationtimestamp| type| source ---|---|--- 2026-07-05 04:19:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116865443796222234 2026-07-05 09:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpv7m3esm62m 2026-07-05 09:21:39+00:00| seen|...
CVE-2026-14647
A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...
CVE-2026-14647 onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds
A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...
IKEv2 Denial of Service via malformed fragmentation
...
IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload
...
IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
...
PT-2026-55726
Name of the Vulnerable Software and Affected Versions onnx versions prior to 1.22.0 Description A weakness in the onnxruntime component allows for a remote out-of-bounds read. This occurs within the convPoolShapeInference opset19 function located in the onnx/defs/nn/old.cc file. Recommendations...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass due to improper enforcement of the PKCE S256 challenge during the OAuth2 token exchange process. An attacker can obtain access tokens without providing the expected code verifier by bypassing the intended...
Replay Attack
Overview Affected versions of this package are vulnerable to Replay Attack due to improper enforcement of OAuth2 authorization code expiry and single-use requirements in the authorization code process. An attacker can gain unauthorized access by reusing valid authorization codes during the token...
CVE-2026-26232
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange...
CVE-2026-26247
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...
CVE-2026-26232 Gitea OAuth2 authorization codes lack expiry and reuse enforcement
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange...
CVE-2026-26247
Gitea versions before 1.25.5 are affected by an OAuth2 PKCE S256 verification weakness during the authorization/token-exchange flow. The underlying issue is that PKCE S256 is not persisted/validated correctly, allowing token exchange without the required verifier check. Impact is a potential acce...
CVE-2026-26247 Gitea OAuth2 PKCE S256 challenges are not enforced during token exchange
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...
