92235 matches found
CVE-2026-58419: Exposure of Sensitive Information to an Unauthorized Actor
Notification API leaks private issue metadata after access revocation...
CVE-2026-58418: Server-Side Request Forgery (SSRF)
SSRF via HTTP Redirect in Repository Migration...
CVE-2026-58422: Improper Access Control
Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts...
CVE-2026-8925: Double Free
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
CVE-2026-8286: Improper Certificate Validation
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...
CVE-2026-11564: Improper Certificate Validation
libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA...
Ubuntu 24.04 LTS / 25.10 : Linux kernel vulnerabilities (USN-8490-1)
"The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8490-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...
CVE-2026-58424: Improper Authorization
Permanent Fork PR Workflow Approval Gate Bypass...
CVE-2026-8286: Improper Certificate Validation
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...
GHSA-4JJ9-CGQC-X9H5 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips...
CVE-2025-66001 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips...
GHSA-8FF6-PC43-JWV3 vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
CVE-2025-53884 vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
GHSA-8FF6-PC43-JWV3 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...
CVE-2025-53884 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...
pme_security_scanner
No d...
CVE-2026-54404: Improper Neutralization of Special Elements used in an SQL Command
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances...
CVE-2026-54401: Server-Side Request Forgery (SSRF)
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery SSRF to escalate privileges within such UniFi OS devices or instances...
CVE-2026-4770: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117...