GHSA-V859-C572-QH5P

creationtimestamp| type| source ---|---|--- 2026-09-14 22:32:03+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3...

GHSA-9J48-X3C3-MRP2

creationtimestamp| type| source ---|---|--- 2026-09-14 22:09:19+00:00| seen| https://bsky.app/profile/technotenshi.bsky.social/post/3mvj4rrlolk2t...

GHSA-RRXG-G2PF-6HH4

creationtimestamp| type| source ---|---|--- 2026-09-14 18:21:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117270781388053699 2026-09-14 19:32:08+00:00| seen| https://gist.github.com/alon710/3693f8803a657bff4ffb362747901533...

DEBIAN-CVE-2026-19499

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

CVE-2026-7848

creationtimestamp| type| source ---|---|--- 2026-09-14 16:15:02+00:00| seen| https://cert.pl/en/posts/2026/09/CVE-2026-7848 2026-09-14 16:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dxvl3rokmnqkg...

CVE-2026-91003

creationtimestamp| type| source ---|---|--- 2026-09-14 16:03:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117270235343636544 2026-09-15 08:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvk5tuq5ja2e 2026-09-15 15:12:57+00:00| seen|...

ROOT-APP-NPM-GHSA-RP42-5VXX-QPWR GHSA-rp42-5vxx-qpwr in basic-ftp - Patched by Root

Root has patched GHSA-rp42-5vxx-qpwr in the basic-ftp package for Root:npm. Multiple fixed versions available...

Astra Linux – Vulnerability in Firefox

A transient execution vulnerability, named Floating Point Value Injection FPVI, allowed attackers to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. A related vulnerability, Speculative Code Store Bypass SCSB, did not affect Firefox. This vulnerability affect...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free remote desktop protocol library and client. Affected versions of FreeRDP lack input validation in the urbdrc channel. A malicious server can trick a FreeRDP-based client into crashing due to a division by zero. This issue has been addressed in version 2.9.0. All users are advise...

Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and earlier use an inefficient algorithm when parsing parameters for HTTP header values, which may lead to Denial-of-Service attacks. The parseparam function in httputil.py is used to parse specific HTTP header...

Astra Linux – Vulnerability in Firefox

A type confusion bug in WebAssembly could be exploited by an attacker to potentially execute malicious code. This vulnerability affects Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1...

Astra Linux – Vulnerability in protobuf

A parsing vulnerability exists for the MessageSet type in ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, and 4.21.5 for protobuf-python. A specially...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in junit4

In JUnit 4, versions starting from 4.7 and before 4.13.1, the TemporaryFolder test rule contains a local information disclosure vulnerability. On Unix-like systems, the system’s temporary directory is shared among all users on that system. As a result, when files and directories are written to th...

Astra Linux – Vulnerability in twitter-bootstrap3

A security vulnerability has been discovered in Bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is related to the “data-loading-text” attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into this attribute,...

Astra Linux – Vulnerability in sane-backends

A heap buffer overflow in SANE backends before version 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, known as GHSL-2020-080...

ROOT-APP-NPM-CVE-2026-44489 CVE-2026-44489 in axios - Patched by Root

Root has patched CVE-2026-44489 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42040 CVE-2026-42040 in axios - Patched by Root

Root has patched CVE-2026-42040 in the axios package for Root:npm. Multiple fixed versions available...

CVE-2026-90880

creationtimestamp| type| source ---|---|--- 2026-09-14 07:31:00+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117268221776876628 2026-09-15 11:46:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvkkgothuv2c...

CVE-2026-14962

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:13+00:00| seen| Telegram/cfwIjD0BfTttpxj-RZnmg61xri6aKpaW-Ttu0tih2neg1Gg 2026-09-14 03:00:13+00:00| seen| Telegram/SISeOiJWiDHPKa0-EGjfIE-tIZnqvMDmbIqcTRDP3O63UA 2026-09-15 00:00:22+00:00| published-proof-of-concept|...