58242 matches found
EUVD-2026-40336
In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract function...
CVE-2026-4360
In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract function...
CVE-2026-58374
creationtimestamp| type| source ---|---|--- 2026-06-30 14:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj67lqvub23 2026-07-06 12:03:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpy2c74dl62h...
MINI-F3Q5-7XGG-G49M
Bulletin has no description...
MINI-7PRW-57M6-WF4X
Bulletin has no description...
MINI-WJ7J-JFXQ-52QC
Bulletin has no description...
MINI-V4QP-5JJR-3X8M
Bulletin has no description...
CVE-2026-47105
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
MINI-4X3F-V546-CM8R
Bulletin has no description...
MINI-846V-X4XH-8PRQ
Bulletin has no description...
DEBIAN-CVE-2026-52760
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...
UBUNTU-CVE-2026-52760
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...
CVE-2026-12610
creationtimestamp| type| source ---|---|--- 2026-06-30 10:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiscbuw6r2w 2026-07-30 16:31:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mruuhjm6g22i 2026-07-30 16:31:36+00:00| seen|...
CVE-2026-12076
creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqn3brkz2v 2026-07-01 02:36:28+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-12076...
EDB-47204
creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:37+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd110aa0-5c1c-4ded-96d5-1169676daf2f...
EDB-49456
creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:08+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/535f4366-9634-4e65-ba96-29eaf5b12f81...
CVE-2026-52760
CVE-2026-52760 is a Cross-site Scripting vulnerability in Apache ActiveMQ and its Web Console. The issue arises because the browse page renders a JMS message ID directly without sanitization, enabling an authenticated producer to send a crafted message ID that contains HTML/JavaScript, which will...
CVE-2026-52760
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...
CVE-2026-52760
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...