CVE-2026-0964

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue...

CVE-2026-22986 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-aws...

GHSA-7M5P-V483-RC7R vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-aws...

EUVD-2025-209051

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

CVE-2026-28894

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A remote attacker may be able to cause a denial-of-service...

CVE-2026-28879

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may...

CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

OC Messaging and Custom Messaging Gateway

RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated low-privileged user to gain access to SMS messages outside of their authorized tenant scope via a crafted company or tenant identifier parameter. 2. RECOMMENDED PRACTICES CISA recommends users take...

CVE-2026-20114

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities20260326 2026-03-26 03:00:10+00:00| seen|...

CVE-2026-33022 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tkn, tekton-chains...

CVE-2026-33231 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

CVE-2026-33231 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, label-studio, py3-nltk, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk...

GHSA-RF74-V2FM-23PW vulnerabilities

Vulnerabilities for packages: nemo, open-webui, label-studio, py3-nltk, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk...

CVE-2014-125112

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when...

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

Linux Distros Unpatched Vulnerability : CVE-2026-4897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary vi...

CVE-2026-33246 vulnerabilities

Vulnerabilities for packages: nats-top-fips, rke2-runtime-fips, kine, nats, nats-fips, k3s, rke2-runtime, telegraf, milvus, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter...

CVE-2026-33223 vulnerabilities

Vulnerabilities for packages: nats-top-fips, rke2-runtime-fips, kine, nats, nats-fips, k3s, rke2-runtime, telegraf, milvus, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter...

GHSA-X6G4-F6Q3-FQVV vulnerabilities

Vulnerabilities for packages: nats-top-fips, rke2-runtime-fips, kine, nats, nats-fips, k3s, rke2-runtime, telegraf, milvus, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter...

CVE-2026-33215 vulnerabilities

Vulnerabilities for packages: nats-top-fips, rke2-runtime-fips, kine, nats, nats-fips, k3s, rke2-runtime, telegraf, milvus, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter...