CVE-2026-34976 vulnerabilities

Vulnerabilities for packages: dgraph...

CVE-2026-34976 vulnerabilities

Vulnerabilities for packages: dgraph...

CVE-2026-4224 vulnerabilities

Vulnerabilities for packages: python...

GHSA-H46W-FFVP-4PW5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-3644 vulnerabilities

Vulnerabilities for packages: python...

GHSA-VF33-88PF-HWP3 vulnerabilities

Vulnerabilities for packages: python...

Linux Distros Unpatched Vulnerability : CVE-2024-14031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sereal::Encoder versions from 4.000 through 4.009002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the...

CVE-2026-2625

A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager RPM file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leading to an...

AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data

AI firm Mercor confirms a breach linked to a LiteLLM supply chain attack, as hackers claim to have stolen 4TB of sensitive data and internal systems...

CVE-2026-23444

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211txprepareskb failure ieee80211txprepareskb has three error paths, but only two of them free the skb. The first error path ieee80211txprepare returning TXDROP does not free it, while...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, json-server, code-server, py3-captum, tensorflow-cpu-jupyter, jitsucom-jitsu, py3-jupyterlab, kubeflow-pipelines, kibana, langfuse, kubeflow-katib, vitess, drupal, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards, pelias-api, saf,...

Linux Distros Unpatched Vulnerability : CVE-2026-24096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25...

Linux Distros Unpatched Vulnerability : CVE-2026-34873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session. CVE-2026-34873 Note that Nessus relies...

GHSA-M5WQ-R4R4-4QRH vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: argo-workflows, saf, vitess, kubeflow-pipelines, langfuse, jitsucom-jitsu, npm, code-server, kubeflow-katib, py3-jupyterlab, sqlpad, prism, opensearch-dashboards, ts-patch, renovate, kubeflow-centraldashboard, json-server...

GHSA-M5WQ-R4R4-4QRH vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-35383 Bentley Systems iTwin Platform exposed access token

Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. As of 2026-03-27, the token is no longer present in the web pages and cannot be used to enumerate or delete...

CVE-2025-43210

CVE-2025-43210 describes an out-of-bounds access in Apple’s media processing that may cause an app to terminate or memory corruption when handling maliciously crafted media files. Affected products include Apple platforms running iOS, iPadOS, macOS, tvOS, visionOS, and watchOS with specific fixed...

CVE-2026-34835

Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, , and @. Because req.hos...

What Happens When a Nuclear Site Is Hit?

As strikes continue on Iran’s nuclear facilities, the real danger isn’t the explosion, but what happens if critical safety systems fail—and how that risk could spread across the Gulf...