12704 matches found
Starlette - Improper Validation of Unsafe Equivalence in Input
A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...
Adobe Experience Manager ≤ 6.5.23.0 - XML Injection
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. id: CVE-2025-54251 info: name: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection author: DhiyaneshDK,assetnote severity: medium description: |...
SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...
GHSA-RMMH-P597-PPVV vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-HFG8-HC9C-6C3H vulnerabilities
Vulnerabilities for packages: docker-fips, buildkitd, openbao, buildkitd-fips, buildah, docker-cli-buildx-fips, telegraf, buildah-fips, docker-cli-buildx, openbao-fips, podman, ctop-fips, skaffold-fips, podman-fips, skaffold...
CVE-2026-15065
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...
EUVD-2026-62424
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...
CVE-2026-15065 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...
CVE-2026-15065
IBM AIX NIM (versions 7.2, 7.3) and PowerVM VIOS 4.1 expose intermediate CA private keys in publicly available update files (CWE-312), allowing unauthenticated remote attackers to bypass security restrictions. IBM has released Service Packs (SP13/SP5/SP3/SP2) and Fix Packs (4.1.2.20/4.1.1.30/4.1....
CVE-2026-74338
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker could bypass security checks by directly using the bpf2 system call to load a sleepable BPFLSMCGROUP program. This could lead to a kernel crash, resulting in a Denial of Service DoS on the affected syste...
.NET 10.0 security, bug fix, and enhancement update
An update is available for dotnet10.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...
CVE-2026-74973
creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...
CVE-2026-74949
creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtix3ozgqv22...
CVE-2026-74960
Site isolation issue in the WebExtensions component. This vulnerabilit...
UBUNTU-CVE-2026-74963
Same-origin policy bypass in the Networking: Cookies component. This v...
UBUNTU-CVE-2026-74938
Mitigation bypass in the JavaScript: GC component. This vulnerability...
UBUNTU-CVE-2026-74968
Site isolation issue in the Graphics: WebRender component. This vulner...
CVE-2026-74962
Site isolation issue in the Networking: Cookies component. This vulner...
ROS-20260819-73-0041
The vulnerability in Tomcat is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...