dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-44244 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-44244 Source advisory: OSV:GHSA-V87R-6Q3F-2J67...

CVE-2026-44111

creationtimestamp| type| source ---|---|--- 2026-05-06 21:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7oxqlthw2p...

dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-44243 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-44243 Source advisory: OSV:GHSA-7545-FCXQ-7J24...

CVE-2026-20035

creationtimestamp| type| source ---|---|--- 2026-05-06 19:31:15+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml7guk2ryo2v 2026-05-07 00:53:19+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24 2026-05-07 14:40:13+00:00| seen|...

GHSA-VRQV-52X7-RM4V

creationtimestamp| type| source ---|---|--- 2026-05-06 19:10:29+00:00| seen| https://gist.github.com/alon710/ddc2dae3143b446acfb966905cf3bf2f...

CVE-2025-66369

creationtimestamp| type| source ---|---|--- 2026-05-06 19:00:25+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116529167159124842 2026-05-10 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260511...

CVE-2026-8027

creationtimestamp| type| source ---|---|--- 2026-05-06 18:01:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7bubgd5g2t...

MINI-694R-4JR4-F9J8

Bulletin has no description...

CVE-2026-43278

creationtimestamp| type| source ---|---|--- 2026-05-06 17:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528795236956577 2026-05-07 11:52:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116533148086350826 2026-07-02 06:18:13+00:00| seen|...

CVE-2026-43258

creationtimestamp| type| source ---|---|--- 2026-05-06 14:43:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528158216639257 2026-07-02 06:17:47+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

EUVD-2026-27647

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: annotate data-races around hdev-reqstatus hcicmdsyncsk sets hdev-reqstatus under hdev-reqlock: hdev-reqstatus = HCIREQPEND; However, several other functions read or write hdev-reqstatus without holding any loc...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2026-43110

creationtimestamp| type| source ---|---|--- 2026-05-06 11:48:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527470440319391 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-06 05:54:49+00:00| see...

CVE-2026-43115

creationtimestamp| type| source ---|---|--- 2026-05-06 11:07:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527308839911875...

CVE-2026-23928

creationtimestamp| type| source ---|---|--- 2026-05-06 10:31:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6iq6wlim2r 2026-05-06 14:30:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q...

CVE-2026-43119

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: annotate data-races around hdev-reqstatus hcicmdsyncsk sets hdev-reqstatus under hdev-reqlock: hdev-reqstatus = HCIREQPEND; However, several other functions read or write hdev-reqstatus without holding any loc...

CVE-2026-43075

creationtimestamp| type| source ---|---|--- 2026-05-06 10:13:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527096513413440 2026-07-06 05:54:09+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 06:24:50+00:00|...

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

...

CVE-2026-43119 Bluetooth: hci_sync: annotate data-races around hdev->req_status

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: annotate data-races around hdev-reqstatus hcicmdsyncsk sets hdev-reqstatus under hdev-reqlock: hdev-reqstatus = HCIREQPEND; However, several other functions read or write hdev-reqstatus without holding any loc...

CVE-2026-43119

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: annotate data-races around hdev-reqstatus hcicmdsyncsk sets hdev-reqstatus under hdev-reqlock: hdev-reqstatus = HCIREQPEND; However, several other functions read or write hdev-reqstatus without holding any loc...