50807 matches found
CVE-2026-9143 Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen
There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions...
EUVD-2026-38030
There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI grpc-device 2.17.0 and prior versions...
CVE-2026-56141
creationtimestamp| type| source ---|---|--- 2026-06-19 13:40:07+00:00| seen| https://bsky.app/profile/suriq.io/post/3monhqxqisu2b 2026-06-19 16:25:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monqyrh4sd2g 2026-06-21 12:07:15+00:00| seen|...
Missing Authentication for Critical Function
Overview network-ai is an AI agent orchestration framework for TypeScript/Node.js - 29 adapters LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Compu Affected version...
CVE-2026-48140 Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream
There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message...
EUVD-2026-38021
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control...
CVE-2026-44087 Apache APISIX: Openid-connect plugin Identity Header Spoofing
Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default configuration has an attack surface that allows the attacker to spoof identity headers allowing the attacker to get unauthorized access the protected resources. This issue affect...
EUVD-2026-38013
Authentication Bypass by Spoofing vulnerability in Apache APISIX. The attacker can completely bypass authentication capitalising on certain configurations of jwt-auth plugin. This issue affects Apache APISIX: from v2.2 through v3.16.0. Users are recommended to upgrade to version v3.17.0, which...
jfp-console-poc
JFP Console PoC Tamper-evident autonomous system governor w...
vlc-vp9-reschange-crash-poc
VLC VP9 Resolution-Change Crash PoC This repository contains...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Stopping the IRR scan in kvmapicupdateirr even if PIR is empty The function apicfindhighestvector is used when PID.ON is set, but PIR turns out to be empty. This ensures that the highest pending interrupt from the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: Disallowed non-power-of-two minregionsz values in damonstart. The commit d8f867fa0825 „mm/damon: add damonctx-minszregion“ introduced a bug that allowed unaligned DAMON region addresses. The commit c80f46ac228b...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB The HBA firmware reports NVMe MDTS values based on the underlying drive’s capabilities. However, since the driver allocates a fixed 4K buffer for the PRP list, which can accommodate...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: An Oops has been fixed when the readcurrenttimer function is called on ARM32 platforms where the SP804 is not registered as the schedcclock. On the SP804, the delay timer shares the same clkevt...
CVE-2026-8713
creationtimestamp| type| source ---|---|--- 2026-06-19 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mon563pgxv2l 2026-06-19 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116776306465494065 2026-06-19 13:19:15+00:00| seen|...
GHSA-72FW-CQH5-F324
creationtimestamp| type| source ---|---|--- 2026-06-19 09:11:18+00:00| seen| https://gist.github.com/alon710/0d5ae642ba19f62c45be74e869a28ce0 2026-06-19 09:22:12+00:00| seen| https://gist.github.com/alon710/e9f4de9ef468ec9331512207326f51c3...
CVE-2026-53844
creationtimestamp| type| source ---|---|--- 2026-06-19 09:11:18+00:00| seen| https://gist.github.com/alon710/0d5ae642ba19f62c45be74e869a28ce0 2026-06-19 09:22:12+00:00| seen| https://gist.github.com/alon710/e9f4de9ef468ec9331512207326f51c3...
CVE-2026-7515
creationtimestamp| type| source ---|---|--- 2026-06-19 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momy567jwx2t 2026-06-19 09:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775952596013865 2026-06-22 00:39:28+00:00| seen|...
CVE-2026-56138 Authenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Files
AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to the fix, attempted to retrieve and compare item contents without first verifying that both referenced items existed ...
