httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

MINI-HHVQ-M4F8-GJC5

Bulletin has no description...

SUSE CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...

SUSE CVE-2026-63927

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usbhcdgivebackurb so save the urb-status ahead of time...

SUSE CVE-2026-63961

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and se...

CVE-2026-1617

creationtimestamp| type| source ---|---|--- 2026-07-21 11:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5puffh442v 2026-07-21 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr5r4jbqma2l 2026-07-21 13:21:30+00:00| seen|...

GHSA-FJ7V-R99M-22GQ

creationtimestamp| type| source ---|---|--- 2026-07-21 11:31:12+00:00| seen| https://gist.github.com/alon710/48f3deb1ca1eafb4018fbe6276da18c1...

GHSA-6R8X-57C9-28J4

creationtimestamp| type| source ---|---|--- 2026-07-21 10:31:21+00:00| seen| https://gist.github.com/alon710/8369d28698d5eaa2f4badffaca60e4b4...

GHSA-JJJ6-MW9F-P565

creationtimestamp| type| source ---|---|--- 2026-07-21 09:31:09+00:00| seen| https://gist.github.com/alon710/58614afe66c43fc333bb604ba1de657d...

CVE-2026-15812

creationtimestamp| type| source ---|---|--- 2026-07-21 05:57:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116956427872567771 2026-07-21 10:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5n4hn4dy2o...

PT-2026-63303

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...

PT-2026-63259

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...

GHSA-G446-98W2-8P5W

creationtimestamp| type| source ---|---|--- 2026-07-20 22:31:01+00:00| seen| https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771...

CVE-2026-53594

creationtimestamp| type| source ---|---|--- 2026-07-20 22:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cjglmhe2s...

GHSA-3JXR-9VMJ-R5CP

creationtimestamp| type| source ---|---|--- 2026-07-20 21:31:31+00:00| seen| https://gist.github.com/alon710/8cb13493a0f92ed662f2d6291bd0d794...

CVE-2026-44584

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-44584

Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...

CVE-2026-44584 Paymenter doesn't reset email verification status after email change

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-36669

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k...

CVE-2026-16277

creationtimestamp| type| source ---|---|--- 2026-07-20 19:16:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116953907325387577 2026-07-23 22:33:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24...