12837 matches found
Fedora 43 : php (2026-c4d1ca4f16)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c4d1ca4f16 advisory. PHP version 8.4.21 07 May 2026 Core: Fixed bug GH-19983 GC assertion failure with fibers, generators and destructors. iliaal Fixed bug GH-21478...
PT-2026-42168
Name of the Vulnerable Software and Affected Versions Twig versions 2.16.x Twig versions 3.9.0 through 3.25.x Description A sandbox bypass exists when using a SourcePolicyInterface. This occurs because a runtime check fails to use the current template source, allowing attackers with template...
MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability
Summary A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib versions: 26.01. A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021529)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021529 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: Fix double free in dvbregisterdevice In function dvbregisterdevice -...
CVE-2026-42526
In the AWS Secrets Manager and SSM Parameter Store secrets backends of apache-airflow-providers-amazon prior to 9.28.0, the team-scoping logic could resolve a connid containing a / e.g. "myteam/conn" to the same path as another team's team-scoped secret when the caller had no team context. A...
CVE-2026-8955
creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520 2026-05-20 02:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmasq4ron32w 2026-05-20 02:01:31+00:00| seen|...
EUVD-2026-30978
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...
ALPINE-CVE-2026-32738
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...
CLSA-2026-1779212122 sos: Fix of CVE-2022-2806
CVE-2022-2806: ovirt plugin: filter out all password keys in answer files...
SUSE-SU-2026:21743-1 Security update for kernel-livepatch-MICRO-6-0_Update_22
This update for kernel-livepatch-MICRO-6-0Update22 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 22...
SUSE-SU-2026:2010-1 Security update for erlang26
This update for erlang26 fixes the following issues Security issues: - CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. - CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. - CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc125968...
offensive-claude
Offensive Security Research Config for Claude Code A comprehe...
CVE-2026-4858
creationtimestamp| type| source ---|---|--- 2026-05-19 00:51:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-mattermost 2026-05-21 12:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmeep2dusz2k 2026-05-21 13:09:09+00:00| seen|...
SUSE SLES15 Security Update : rmt-server (SUSE-SU-2026:1964-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1964-1 advisory. This update for rmt-server fixes the following issues - CVE-2026-26961: rack: mismatch in header handling can allow to smuggle...
Angular template injection in Reports in Guardian/CMC before 26.1.0
Summary An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. Impact An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially...
Replay Attack
Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Replay Attack through the RequiredActionFactory and required-action implementations in the...
PT-2026-41995
Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.22.0 Description An unsigned integer underflow occurs in the Chunk constructor when processing a crafted HEIF sequence file containing samples per chunk=0 in the stsc box. This causes all samples to map to an empty...
CVE-2026-40930
creationtimestamp| type| source ---|---|--- 2026-05-18 23:21:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116598142822807698...
CVE-2026-6638 affecting package postgresql for versions less than 16.14-1
CVE-2026-6638 affecting package postgresql for versions less than 16.14-1. An upgraded version of the package is available that resolves this issue...
