58483 matches found
PT-2026-39241
Name of the Vulnerable Software and Affected Versions eventsource-encoder versions prior to 1.0.2 Description The software fails to sanitize the event and id fields of an EventSourceMessage before serialization in the encodeMessage function. An attacker who controls these fields can inject...
PT-2026-39262
Name of the Vulnerable Software and Affected Versions MCP Registry versions prior to 1.7.6 Description The GitHub OIDC flow for both client and server is bound to a global audience string instead of the specific registry instance being targeted. On the client side, the publisher always appends...
PT-2026-39267
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description Open WebUI is a self-hosted artificial intelligence platform. A mass assignment issue exists where the FolderForm uses a configuration that permits arbitrary fields to pass through Pydantic...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There are security vulnerabilities in the Linux kernel. These vulnerabilities arise from errors in the snbeppci2phymapinit function during Intel uncore performance...
PT-2026-38995
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel within the perf/x86/intel/uncore component regarding die ID initialization and lookup. In the snbep pci2phy map init function, when nr node ids is...
CVE-2026-40214
In OpenStack Cyborg before 16.0.1, the Accelerator Request ARQ API does not enforce project ownership at any layer. The projectid column in the database is never populated NULL for every ARQ, database queries have no project filtering, and policy checks are self-referential the authorizewsgi...
UBUNTU-CVE-2026-40214
In OpenStack Cyborg before 16.0.1, the Accelerator Request ARQ API does not enforce project ownership at any layer. The projectid column in the database is never populated NULL for every ARQ, database queries have no project filtering, and policy checks are self-referential the authorizewsgi...
CVE-2026-44243
creationtimestamp| type| source ---|---|--- 2026-05-07 21:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5bswnv72i 2026-05-12 21:03:25+00:00| seen| https://gist.github.com/trippersham/98c56220f8edca1dd84337d7c1d67182...
CVE-2026-42579 vulnerabilities
Vulnerabilities for packages: akhq, spark, camunda, infinispan, spark-kubernetes-operator-fips, s3proxy, apache-hop, kayenta, opensearch, strimzi-kafka-operator, apicurio-registry, apicurio-registry-fips, celeborn, kayenta-fips, druid, management-api-for-apache-cassandra-4.0, trino, elasticsearch...
CGA-M3FC-QM88-5647
Bulletin has no description...
MINI-PXX3-V887-JCR3
Bulletin has no description...
CGA-XCQ7-9MQX-6HMQ
Bulletin has no description...
CVE-2023-27476
creationtimestamp| type| source ---|---|--- 2026-05-07 14:08:59+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mlbfczflrvx2...
PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage
Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026. The vulnerability in question is CVE-2026-0300 CVSS score: 9.3/8.7, a buffer overflow vulnerability in the User-ID Authentication...
ECHO-68FE-1CD7-632B
Bulletin has no description...
ECHO-0414-10DF-B858
Bulletin has no description...
ECHO-DA51-97F9-E11C
Bulletin has no description...
ECHO-0413-5BD8-5E30
Bulletin has no description...