27221 matches found
CVE-2026-35247
creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwxg6zh2c...
OPENSUSE-SU-2026:20612-1 Security update for tomcat10
This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.54 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...
CVE-2026-40450
creationtimestamp| type| source ---|---|--- 2026-04-22 08:29:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33exhwe62n...
CVE-2026-22746
Vulnerability in Spring Spring Security. If an application is using the UserDetailsisEnabled, isAccountNonExpired, or isAccountNonLocked user attributes, to enable, expire, or lock users, then DaoAuthenticationProvider's timing attack defense can be bypassed for users who are disabled, expired, o...
CVE-2026-22746 User Attribute Enumeration when Using DaoAuthenticationProvider
Vulnerability in Spring Spring Security. If an application is using the UserDetailsisEnabled, isAccountNonExpired, or isAccountNonLocked user attributes, to enable, expire, or lock users, then DaoAuthenticationProvider's timing attack defense can be bypassed for users who are disabled, expired, o...
GHSA-J432-4W3J-3W8J
creationtimestamp| type| source ---|---|--- 2026-04-22 01:19:03+00:00| seen| Telegram/zBPsvp7areyPvO2SEeKM1Qy-KxN79fyHXtde1OrDiJAWALw...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013852)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013852 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamicevents interface on...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013705)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013705 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and...
PT-2026-34513
Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the env utility causes a failure to correctly parse command-line arguments when using the '-S' split-string option. The implementation incorrectly validates backslas...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013803)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013803 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' which contains the unhandled...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013777)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013777 advisory. In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and...
Nimiq security vulnerabilities
Nimiq is an open-source implementation of the Albatross protocol in Rust. Versions of Nimiq prior to 1.3.0 contained a security vulnerability. This vulnerability stemmed from the network-libp2p library’s use of the libp2p ConnectionHandler state machine. This handler assumes that each connection...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013851)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013851 advisory. In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in statusresync statusresync will calculate 'currresync - recoveryactive' to...
CVE-2026-34292
creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:48+00:00| seen| Telegram/DVTWZmGG1qCJe-0IJfQ1HXgYFTwgnUj24suPZSIXyV8Y 2026-04-22 12:50:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwqt6xo2w...
GHSA-7H3J-592V-JCRP
creationtimestamp| type| source ---|---|--- 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...
GHSA-C29W-QQ4M-2GCV
creationtimestamp| type| source ---|---|--- 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...
MINI-929J-7933-HQ8G
Bulletin has no description...
Use of a Broken or Risky Cryptographic Algorithm
Overview Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm in the cryptographic algorithm implementation. An attacker can compromise the confidentiality of sensitive information by exploiting weak or insufficient cryptographic algorithms...