72278 matches found
GHSA-QCXP-RJ5J-4RR9 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-qemu-melange, linux-aws, linux-azure, linux-gcp...
CVE-2026-53167 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-qemu-melange, linux-aws, linux-azure, linux-gcp...
CVE-2026-59704
creationtimestamp| type| source ---|---|--- 2026-07-08 01:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3wocgs4626 2026-07-11 00:04:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdeherda22s...
CVE-2026-55438 Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment parsed as a UUID, the...
CVE-2026-55418
creationtimestamp| type| source ---|---|--- 2026-07-08 00:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3t74gzc427...
CVE-2026-12277
creationtimestamp| type| source ---|---|--- 2026-07-08 00:00:21+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq3ssrwtoa2e 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92408 2026-07-14 00:00:18+00:00| seen| https://t.me/GithubRedTeam/92408 2026-07-15 00:00:31+00:00|...
PT-2026-56575
Name of the Vulnerable Software and Affected Versions PAN-OS versions 12.1 PAN-OS versions 11.2 PAN-OS versions 11.1 PAN-OS versions 10.2 Prisma Access affected versions not specified Description Multiple buffer overflow issues exist in the User-ID Terminal Server Agent TSA component of PAN-OS an...
PT-2026-56400
Name of the Vulnerable Software and Affected Versions LatePoint – Calendar Booking Plugin for Appointments and Events versions prior to 5.4.1 Description Improper input validation in the Stripe Connect payment processor allows unauthenticated attackers to pay an arbitrary amount. This occurs...
PT-2026-56454
Name of the Vulnerable Software and Affected Versions Adalo versions 1 through 2 Description Attackers can extract complete user records and correlate user behavior across multiple applications through the enumeration of the dbId variable. This occurs because the platform lacks data minimization,...
CVE-2026-55428 Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tailnet coordinator validates that an agent's Addresses derive from its authenticated UUID but applies no equivalent check to AllowedIPs. The coordinato...
CVE-2026-55428
CVE-2026-55428 (Coder) describes a route hijack risk in the tailnet coordinator where an agent’s AllowedIPs are not validated against the agent’s authenticated UUID, unlike the Addresses check. The coordinator forwards adversarially supplied AllowedIPs to WireGuard peers, potentially enabling an ...
CVE-2026-57172
creationtimestamp| type| source ---|---|--- 2026-07-07 23:29:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3r323sfn2i...
CGA-QW62-W687-6P5H
Bulletin has no description...
CGA-M279-PQXV-4433
Bulletin has no description...
CGA-MCH3-25F9-W252
Bulletin has no description...
CGA-6M8R-7HPH-HG24
Bulletin has no description...
CGA-772P-X4VG-PM67
Bulletin has no description...
CGA-J74C-7J98-M8QF
Bulletin has no description...
CVE-2026-59707
creationtimestamp| type| source ---|---|--- 2026-07-07 21:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3lnhc45a2b 2026-07-07 23:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rytpkdd26 2026-07-11 00:07:41+00:00| seen|...