85203 matches found
PT-2026-50824
Name of the Vulnerable Software and Affected Versions Daytona versions prior to 0.186 Description A sandbox volume reference volumeId which may also be a volume name was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing...
PT-2026-50702
Name of the Vulnerable Software and Affected Versions Node.js version 22 Node.js version 24 Node.js version 26 Description A flaw in the Permission Model enforcement allows a bypass through path misvalidation in the process.report.writeReport function. This issue can result in a confidentiality...
Siemens RUGGEDCOM RST2428P Improper Input Validation (CVE-2025-40278)
In the Linux kernel, the following vulnerability has been resolved: net: sched: actife: initialize struct tcife to fix KMSAN kernel- infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . net? KMSAN: kernel-infoleak in skbdatagramiter In tcfifedump, the variable 'opt' was partially...
EUVD-2026-37509
Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...
Exploit for CVE-2026-49083
CVE-2026-49083 CV...
kage
kage https://github.com/skshadan/k...
CVE-2026-46785
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 12:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moktrm6nvw2z...
CVE-2026-12458
creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 06:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohoobmyt32e 2026-06-21 18:00:00+00:00| seen|...
CVE-2026-36418
JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeSelectApi endpoint passes user-supplied input directly to the Aviator expression engine without adequate validation allowing attackers to execute...
Linux Distros Unpatched Vulnerability : CVE-2026-12329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12. CVE-2026-12329 Note that Nessus...
CVE-2026-46892
...
CVE-2026-46879
...
CVE-2026-46784
...
CVE-2026-46773
...
CVE-2026-35319
...
CVE-2026-5064
creationtimestamp| type| source ---|---|--- 2026-06-16 00:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moekxellhv2p 2026-09-09 08:12:54+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mv33pkgbj62k...
OSV-2026-925 Heap-buffer-overflow in ssh_config_parse_line_internal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523820519 Crash type: Heap-buffer-overflow READ 1 Crash state: sshconfigparselineinternal sshconfigparsestring sshclientconfigfuzzer.c...
CVE-2026-53704
creationtimestamp| type| source ---|---|--- 2026-06-15 20:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4yrlwsf2y...
CVE-2026-50890
Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...