54196 matches found
CVE-2026-19364
creationtimestamp| type| source ---|---|--- 2026-08-09 18:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a6vkzdqkulrsw...
CVE-2026-56818
CVE-2026-56818 affects Netty’s Redis codec (RedisArrayAggregator) where the maxElements path fails to clear retained partial aggregate state, causing a memory leak and attacker-controlled state to remain across a security-limit exception. The issue is triggered when a nested array header exceeds ...
EUVD-2026-54499
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...
Security Bulletin: Multiple vulnerabilities in IBM Semeru affects IBM® Db2® (April 2026 CPU)
Summary There are vulnerabilities in IBM Runtime Environment Java™ Version 8.0.8.60 and earlier, and IBM Semeru Version 21.0.10.0 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in April 2026 Vulnerability Details CVEID:CVE-2026-22021 DESCRIPTION:...
WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dutafi in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10...
ROOT-OS-DEBIAN-13-CVE-2026-31516 CVE-2026-31516 in linux - Patched by Root
Root has patched CVE-2026-31516 in the linux package for Root:Debian:13. Multiple fixed versions available...
[slackware-security] libXfont2
New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXfont2-2.0.9-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Font Server Client encoding Out-Of-Bounds...
EUVD-2026-54170
PHPCodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHPCodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame report formats. As a result, running...
Moderate: Red Hat Security Advisory: systemd security, bug fix, and enhancement update
An update for systemd is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
ROOT-OS-DEBIAN-12-CVE-2026-52913 CVE-2026-52913 in linux - Patched by Root
Root has patched CVE-2026-52913 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23038 CVE-2026-23038 in linux - Patched by Root
Root has patched CVE-2026-23038 in the linux package for Root:Debian:12. Multiple fixed versions available...
GHSA-2QF8-W85F-8MMV vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17685 vulnerabilities
Vulnerabilities for packages: chromium...
rclone: Path traversal in serve s3 allows reading and overwriting root-level files
Summary rclone serve s3 allows a client to read and write files at the root of the remote which would normally be inaccessible by using dot-dot path segments in the object key. It does not allow reading files outside of the root. A request such as GET /bucket/../root-secret.txt is handled as an...
GHSA-P6V2-JMFG-M6R4 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17909 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-71238
creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn2laot2o...
DEBIAN-CVE-2026-64571
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate RX frame length in p54rxeepromreadback p54rxeepromreadback copies the requested EEPROM slice out of a device-supplied readback frame without checking that the skb actually holds that many bytes. Commit...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in July 2026. Vulnerability Details CVEID:CVE-2026-40984 DESCRIPTION: In Micrometer, it is possible for a user to provid...