12845 matches found
CVE-2026-1473
creationtimestamp| type| source ---|---|--- 2026-01-27 19:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgkblitn626...
USN-7980-1: OpenSSL vulnerabilities
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters when doing PKCS12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. CVE-2025-11187...
Microsoft announces the 2026 Security Excellence Awards winners
In today’s fast‑moving digital arena, security isn’t a solo act—it’s a team sport. Every day, defenders across the globe suit up, strategize, and work shoulder‑to‑shoulder to protect organizations and communities from an ever‑evolving field of cyberthreats. That shared spirit of collaboration is...
EUVD-2020-30864
TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...
CVE-2022-32086
creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...
CLSA-2026-1769506798 cups: Fix of CVE-2025-58436
CVE-2025-58436: fix issue where slow messages could delay cupsd...
[SECURITY] [DSA 6112-1] openjdk-21 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6112-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2026 https://www.debian.org/security/faq -...
CVE-2026-1361
creationtimestamp| type| source ---|---|--- 2026-01-27 04:27:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdew7atfsn2h 2026-01-27 05:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdez3nkrse2g 2026-02-17 11:00:00+00:00| seen|...
CVE-2026-24478
creationtimestamp| type| source ---|---|--- 2026-01-27 03:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdesx3gifi2r 2026-02-01 12:54:59+00:00| seen| https://gist.github.com/YLChen-007/0604d17e830a44b5cb80bbcb021741d3...
Ubuntu: Security Advisory (USN-7975-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-6112 : openjdk-21-dbg - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6112 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6112-1 [email protected] https://www.debian.org/securit...
Mageia: Security Advisory (MGASA-2026-0018)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005082)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005082 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc Initialize the size befo...
CVE-2026-23889
pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's tarball extraction allows malicious packages to write files outside the package directory on Windows. The path normalization only checks for ./ but not .. On Windows, backslashes are directory separators...
Uncontrolled Recursion
Overview eslint is a pluggable linting utility for JavaScript and JSX Affected versions of this package are vulnerable to Uncontrolled Recursion in the isSerializable function when handling objects with circular references during the serialization process. An attacker can cause the application to...
BIT-NODE-2025-55132
A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...
BIT-NODE-MIN-2025-55130
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
CVE-2025-59103
The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an SSH service is exposed on port 22. By analyzing the firmware of the devices, it was noticed that there are two users...
CVE-2025-59103
CVE-2025-59103 concerns the Access Manager 92xx hardware revision K7. The Red Hat/NVD/CVE entries describe an SSH service exposed on port 22 with two users that have hardcoded and weak passwords, allowing SSH access. A key root-cause is that password randomization on first deployment is condition...