27533 matches found
CVE-2026-24332
Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...
CVE-2026-24332
Discord is reported to allow revealing whether a user is Invisible by returning a presences array in a WebSocket response that includes users marked as offline, exposing inconsistency with the UI description of Invisible. Affected scope is described across multiple sources (NVD, Red Hat advisory,...
CVE-2026-0920
creationtimestamp| type| source ---|---|--- 2026-01-22 07:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcyot57ncy2r 2026-01-22 08:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyprc5sr52g 2026-01-22 08:57:01+00:00| seen|...
GHSA-5WVM-4M4Q-RH7J
creationtimestamp| type| source ---|---|--- 2026-01-22 03:17:23+00:00| seen| Telegram/tTY91DEWO-ryf2bgI1Zbqu1pP6WWF8wdw0as9TjL7seY8JU...
Discord security vulnerabilities
Discord is a free chat service provided by the Discord company. Versions of Discord dated January 16, 2026 and earlier have security vulnerabilities. These vulnerabilities stem from the WebSocket API responding with status information about hidden users, which may lead to the inference of a user’...
Azure Linux 3.0 Security Update: kernel (CVE-2024-47731)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47731 advisory. - In the Linux kernel, the following vulnerability has been resolved: drivers/perf: Fix alidrwpmu driver...
Azure Linux 3.0 Security Update: kernel (CVE-2025-21681)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21681 advisory. - In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to...
PT-2026-38949
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the adxl380 accelerometer driver where the interrupt handler reads FIFO entries in batches of N samples, based on the number of enabled scan elements. Because the sens...
Azure Linux 3.0 Security Update: kernel (CVE-2024-49912)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49912 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle null...
PT-2026-3920
Name of the Vulnerable Software and Affected Versions Discord versions through 2026-01-16 Description The software allows gathering information about whether a user’s client state is Invisible and not actually offline. The response to a WebSocket API request includes the user in the presences arr...
CVE-2026-23526
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have the staff status may freely change their permissions, including giving themselves superuser status and joining the admin group, which gives them full access to...
CVE-2026-0834
creationtimestamp| type| source ---|---|--- 2026-01-21 21:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxm7pucd62j...
CVE-2021-47853
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
A critical deserialization vulnerability exists in Tendenci Helpdesk module NOTE, by default, Helpdesk is NOT enabled, affecting the version 15.3.11 and earlier. This vulnerability allows remote code execution RCE by an authenticated user with staff security level due to using Python's pickle...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
CVE-2026-23526: Privilege Defined With Unsafe Actions
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have the staff status may freely change their permissions, including giving themselves superuser status and joining the admin group, which gives them full access to...
CVE-2026-1218
creationtimestamp| type| source ---|---|--- 2026-01-20 22:06:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115929695095919658...
CVE-2025-49361
creationtimestamp| type| source ---|---|--- 2026-01-20 20:20:14+00:00| seen| Telegram/lOagtjil15Ub4GBqrQVevvjei3cTEL0Cvnja4ZNEunhgkjg...