13082 matches found
CERTFR-2026-ALE-010
creationtimestamp| type| source ---|---|--- 2026-09-10 16:04:28+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117247591357513667 2026-09-11 05:56:55+00:00| seen| https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p 2026-09-12 05:59:52+00:00| seen|...
CVE-2026-71805
creationtimestamp| type| source ---|---|--- 2026-09-10 15:40:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6f6f2gqj2p 2026-09-11 10:32:27+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvaegwqp5c2q 2026-09-11 12:36:45+00:00| seen|...
CVE-2026-47884
creationtimestamp| type| source ---|---|--- 2026-09-10 15:39:22+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mv6f4sf3wa27...
CVE-2026-88880
creationtimestamp| type| source ---|---|--- 2026-09-10 14:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6cep6ub42y 2026-09-10 16:08:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6gqrfjfu2n...
CVE-2026-88875 AVideo Incomplete API Sanitization Information Disclosure
AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 incompletely sanitizes sensitive user fields in the APIName=video response. Video rows include columns joined from the video owner's user record, and API::getapivideo calls removeSensitiveUserFields only when the...
CVE-2026-37004
creationtimestamp| type| source ---|---|--- 2026-09-10 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv634bqngq2f...
CVE-2024-2851
creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...
EUVD-2026-75388
ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the readID3Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio streams with oversized frame size...
CVE-2026-88285
creationtimestamp| type| source ---|---|--- 2026-09-10 10:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6knaxpydzctnd 2026-09-10 10:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv5sm2o7xx2n 2026-09-10 10:30:10+00:00| seen|...
PYSEC-2026-3924 Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
Summary Affected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search parameters against the configured field allowlists. While the administrative UI restricts available fields based on field configuration, the backend accepts arbitrary field names...
PYSEC-2026-3824 django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
Summary The CMS page cache key ignores the request headers that plugins declare via getvarycacheon. The header is added to the response Vary header, but the CMS's own cache key does not incorporate the header values, so the first visitor's variant is served to all subsequent visitors regardless o...
Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.2.1
external secrets operator for Red Hat OpenShift 1.2.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...
CVE-2026-82782
creationtimestamp| type| source ---|---|--- 2026-09-10 08:46:14+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-82773
creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:47+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-82785
creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:45+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-81635
creationtimestamp| type| source ---|---|--- 2026-09-10 08:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/55jko3zkqgpvt 2026-09-10 08:45:08+00:00| seen| https://jvn.jp/en/jp/JVN37476837...
CVE-2026-88770
creationtimestamp| type| source ---|---|--- 2026-09-10 07:45:11+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv5kmvecu42p 2026-09-10 08:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c6rxygwlblj5a...
USN-8740-1: .NET vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...