4797 matches found
@grackle-ai/cli (>=0.82.2, <=0.132.1), @grackle-ai/powerline (>=0.82.2, <=0.132.1) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.1)
@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...
curl: curl: Man-in-the-middle attack via SSH host key bypass
A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPTSSHKEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the knownhosts file. The callback...
KLA91131 PE vulnerability in Microsoft Server Software
Privilege escalation vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-54998 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Exchange-Online CVE list...
CVE-2026-59099: Reusing a Nonce, Key Pair in Encryption
Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the server lifetime. Attackers can collect multiple client-side webflow execution...
@cyruslabs/install (>=0.1.0-alpha.6, <=0.1.0-alpha.12), @zantarix/cursus (>=0.3.0, <=0.5.0) potentially affected by CVE-2026-48815 via sigstore (>=4.0.0, <=4.1.0)
sigstore NPM version =4.0.0, =0.1.0-alpha.6, =0.3.0, =0.5.0 Source cves: CVE-2026-48815 Source advisory: OSV:GHSA-52V5-JR5W-GJXR...
PT-2026-54770
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Improper output neutralization for logs allows for log injection. An attacker can provide specially crafted input that is written to log files without being properly neutralized. If these log...
Linux Distros Unpatched Vulnerability : CVE-2026-13905
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory v...
PT-2026-54499
The WebAuthn Provider for Two Factor WordPress plugin before 2.5.6 does not correctly validate the second-factor authentication response, allowing an attacker who already knows a user's password to bypass the two-factor authentication requirement by submitting a malformed request...
CVE-2019-12988
creationtimestamp| type| source ---|---|--- 2026-06-30 14:18:36+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed18ecdc-65e9-4d33-8aa2-106767b35a27...
CVE-2017-7876
creationtimestamp| type| source ---|---|--- 2026-06-30 14:18:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78f5676b-e9fb-4677-aaf3-240da91541ff 2026-09-16 11:00:32+00:00| exploited|...
EDB-51096
creationtimestamp| type| source ---|---|--- 2026-06-30 12:40:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f9a1b4c-8d3c-4bd8-880e-a3f250354907...
EDB-50775
creationtimestamp| type| source ---|---|--- 2026-06-30 12:40:27+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/219761c7-3d1a-4eeb-8fc2-e6365b513815...
CVE-2020-13483
creationtimestamp| type| source ---|---|--- 2026-06-30 12:40:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4428c0a7-ddcc-40e0-b8cd-dbe31a0f005d...
EDB-40344
creationtimestamp| type| source ---|---|--- 2026-06-30 12:19:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb230d46-5c19-48c7-aede-32a3a5ce9add...
EDB-46319
creationtimestamp| type| source ---|---|--- 2026-06-30 10:22:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffe3f147-06f2-42a1-a363-00597be3daa9...
EDB-42114
creationtimestamp| type| source ---|---|--- 2026-06-30 10:19:43+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a72f807b-519b-4ed1-8cb6-a58786e1d85b...
CNVD-2021-45363
creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:54+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e90fb3e-1886-4390-a6eb-b6c717104791...
EDB-46881
creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:45+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a46bcdcd-dd84-4e96-b9ef-7e3e67ea6dfa...