27163 matches found
CVE-2026-4480
creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-26 16:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmreiep6t62r 2026-05-27 02:01:29+00:00| seen|...
CVE-2026-9532
creationtimestamp| type| source ---|---|--- 2026-05-26 09:28:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqoj6xdlo2q...
CVE-2026-9526
creationtimestamp| type| source ---|---|--- 2026-05-26 08:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqml7wzde2c...
CVE-2026-43828
creationtimestamp| type| source ---|---|--- 2026-05-26 08:51:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmgui6pf24...
SUSE-SU-2026:2066-1 Security update for xen
This update for xen fixes the following issues - CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264066. - CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. - CVE-2026-23558:...
gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...
gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...
CVE-2026-22678
Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting...
SUSE SLES15 Security Update : php8 (SUSE-SU-2026:2037-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2037-1 advisory. This update for php8 fixes the following issues - CVE-2025-14179: improper handling of NULL bytes by the PDO Firebird driver when...
CVE-2026-48851
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session...
CVE-2026-48851
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session...
GHSA-F9F8-RM49-7JV2
creationtimestamp| type| source ---|---|--- 2026-05-25 18:03:54+00:00| seen| https://bsky.app/profile/winsontang.com/post/3mmp2tsdeu62f...
EUVD-2026-31679
Szafir SDK returns a success status code from the cryptographic digital signature verification process i.e. /VerifyingTaskItem/Signature/VerificationResult/Result/@code == 0, "Positively verified" even when the trust status of the signer's certificate could not be established i.e...
CLSA-2026-1779292803 Fix CVE(s): CVE-2026-6735
SECURITY UPDATE: XSS within status endpoint in PHP-FPM - debian/patches/CVE-2026-6735.patch: XSS within status endpoint in PHP-FPM - CVE-2026-6735...
CVE-2026-48832
creationtimestamp| type| source ---|---|--- 2026-05-25 08:31:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634281312673423...
CVE-2026-9478
creationtimestamp| type| source ---|---|--- 2026-05-25 08:18:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634230129040025 2026-05-26 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmpytbaapv2d 2026-06-22 04:46:32+00:00| seen|...
CVE-2026-9482
creationtimestamp| type| source ---|---|--- 2026-05-25 05:09:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116633485426899323...
Open WebUI get_status() Bypass Access
The vulnerability of the getstatus function in the Open WebUI web interface is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
CVE-2026-9345
creationtimestamp| type| source ---|---|--- 2026-05-24 10:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116629086095233648 2026-05-25 14:45:14+00:00| seen| https://t.me/bdufstecru/3192...