72915 matches found
GHSA-XFQ5-GFCH-M94W vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17736 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17874 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17980 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17719 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17714 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17820 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17656 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-68746
Not Failing Securely 'Failing Open' vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the...
CVE-2026-12872
creationtimestamp| type| source ---|---|--- 2026-08-05 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedouqy5w2a...
rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote
Summary When writing an object with metadata, the local backend applies the source-supplied mode, uid, and gid verbatim: it parses mode as an octal integer and passes it straight into os.Chmodo.path, os.FileModeumode, and passes uid/gid straight into os.Chown. The value is never masked to...
CVE-2026-68746 Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
Not Failing Securely 'Failing Open' vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the...
CVE-2026-70616
CVE-2026-70616 affects boringproxy 0.10.0. The vulnerability allows an authenticated user to cause resource exhaustion on the server by sending requests to GET /loading with attacker-supplied id values. The handler performs no map-lookup validation and blocks on a nil channel, with no timeout, ca...
GHSA-F2R8-JV7C-XQMP
creationtimestamp| type| source ---|---|--- 2026-08-05 19:31:21+00:00| seen| https://gist.github.com/alon710/186d223acc1b5d890a485795705464f7...
CGA-59XH-89XH-P4WV
Bulletin has no description...
CVE-2026-70447
creationtimestamp| type| source ---|---|--- 2026-08-05 18:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dwirplyq3m6dz...
CGA-MW5M-8Q6Q-RVM8
Bulletin has no description...
CGA-J246-H49J-3FRR
Bulletin has no description...