27218 matches found
CVE-2026-3832
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...
MINI-264V-WMVC-QHFH
Bulletin has no description...
Exploit for CVE-2026-31431
Copy Fail - CVE-2026-31431 Detector and Mitigator !Bashhtt...
CVE-2026-39457
creationtimestamp| type| source ---|---|--- 2026-04-30 10:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493161945002037 2026-04-30 13:12:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkpowf5zx72k 2026-04-30 18:07:35+00:00| seen|...
Exploit for CVE-2026-31431
CVE Checker for Copy Fail CVE-2026-31431 Authors: Chris Fol...
CVE-2026-37504
creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:12+00:00| seen| https://gist.github.com/sgInnora/1330e1a82caa79906eec55eeff2c99b9...
Prototype Pollution
Axios is vulnerable to Prototype Pollution. The vulnerability is due to use of the in operator in the mergeDirectKeys strategy for validateStatus, which traverses the prototype chain, allowing a polluted Object.prototype.validateStatus to override behavior and treat all HTTP responses as...
CVE-2026-26204
creationtimestamp| type| source ---|---|--- 2026-04-30 06:01:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116492132169709434...
PT-2026-36086
Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations versions prior to 2.7.17 Description A payment bypass exists due to PHP type juggling, which occurs when a loose comparison is used between different data types, potentially leading to unexpected true results...
GnuTLS security vulnerabilities
GnuTLS is an open-source, free security communication library developed by GnuTLS. GnuTLS has a security vulnerability that stems from a logical error in handling multi-record OCSP responses. This vulnerability could allow remote attackers to cause clients to incorrectly accept revoked server...
CVE-2026-6221
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Exploit for CVE-2026-41940
A companion tool for the watchTowr CVE-2026-41940 authentication...
MINI-2GPR-CW8Q-9R9P
Bulletin has no description...
GCVE-1-2026-0028
creationtimestamp| type| source ---|---|--- 2026-04-29 19:43:54+00:00| seen| https://social.circl.lu/users/cedric/statuses/116489704812221144...
CVE-2026-40552
creationtimestamp| type| source ---|---|--- 2026-04-29 16:42:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116488991780858575...
org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.49)
org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...
org.jenkins-ci.plugins:disable-github-multibranch-status (>=1.0, <=1.2) potentially affected by CVE-2026-42522 via org.jenkins-ci.plugins:github-branch-source (2.2.0)
org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:disable-github-multibranch-status =1.0, =1.2 Sourc...
MINI-RC2Q-GCXH-GXFG
Bulletin has no description...
SUSE-SU-2026:1657-1 Security update for xen
This update for xen fixes the following issues: - CVE-2025-54505: floating point divider state sampling on AMD CPUs AMD-SN-7053 bsc1262428. - CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. - CVE-2026-23558: grant table v2 race in status page mapping bsc1262180...