72050 matches found
ROOT-OS-DEBIAN-11-CVE-2025-23141 CVE-2025-23141 in linux - Patched by Root
Root has patched CVE-2025-23141 in the linux package for Root:Debian:11. Multiple fixed versions available...
MINI-2GWC-H7RV-FGJ2
Bulletin has no description...
MINI-7747-66Q3-5W65
Bulletin has no description...
MINI-2X4Q-23HJ-P3F2
Bulletin has no description...
MINI-3M5M-6J7C-654F
Bulletin has no description...
GHSA-XPP7-93X6-V29M
creationtimestamp| type| source ---|---|--- 2026-08-05 00:31:06+00:00| seen| https://gist.github.com/alon710/3fbc424d9726688cb9c9bb1b3b35fa73...
GHSA-CHGM-3698-JM42
creationtimestamp| type| source ---|---|--- 2026-08-04 23:31:07+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a...
CVE-2026-45537
OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the constructuri function concatenates multiple URI components protocol, username, domain, port, params into a fixed 1024-byte global BSS buffer without any bounds checking. When a routi...
GHSA-XM43-3M56-W3WF
creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...
GHSA-3CG5-48J3-V4GV
creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...
CVE-2026-66902
creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...
CVE-2026-70487
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file i...
ECHO-4652-B79B-C705
Bulletin has no description...
ECHO-1B10-505E-409C
Bulletin has no description...
GHSA-M8RV-5G2X-5CG5 vulnerabilities
Vulnerabilities for packages: vitess, pulumi, langfuse, prism, code-server, npm...
CGA-7234-5HJ8-J5Q9
Bulletin has no description...
MINI-FV6X-7258-8Q3P
Bulletin has no description...
CVE-2026-70478
Summary of CVE-2026-70478 (Flowise) : The unauthenticated endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is exposed via WHITELIST_URLS and decrypts the stored credential to perform an OAuth token refresh, returning a new access_token in the response. An attacker with a valid creden...