5714 matches found
CVE-2026-62696
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:56+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:52+00:00| seen|...
CVE-2026-64920
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:59+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:54+00:00| seen|...
MINI-M3Q2-242R-QC68
Bulletin has no description...
GHSA-GXJG-HHH8-VMC7 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17933 vulnerabilities
Vulnerabilities for packages: chromium...
Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.
Summary IBM Application Performance Management is vulnerable to denial of service, remote code execution, information disclosures and other vulnerabilities due to bundled product IBM ® Db2. This bulletin identifies the steps to address the vulnerabilities. Vulnerability Details CVEID:CVE-2026-777...
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-65986 CVAT has stored XSS via annotation guide assets
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type...
CVE-2026-67858
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server LDS is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allow...
CVE-2026-69249
creationtimestamp| type| source ---|---|--- 2026-08-03 22:20:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g2utxha3ngw7m 2026-08-03 22:35:06+00:00| published-proof-of-concept| https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww 2026-08-03 23:31:38+00:00|...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: mlflow...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor Component uses transformers-4.57.6-py3-none-any.whl, transformers-5.3.0-py3-none-any.whl, netty-codec-http-4.2.12.Final.jar, netty-codec-dns-4.2.12.Final.jar, netty-resolver-dns-4.2.12.Final.jar which are vulnerable to CVE-2026-5241, CVE-2026-42580,...
Linux Distros Unpatched Vulnerability : CVE-2026-18016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted...
CVE-2026-33930
Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when redirect following is enabled. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through...
Important: Red Hat Security Advisory: libreswan security update
An update for libreswan is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-65623 Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit
Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU exhaustion during WebSocket fragment reassembly. The size guard 'Elixir.Bandit.WebSocket.Connection':oversizemessage?/2 called from handleframe/3 in...
Security Bulletin: Apache Lucene PRISMA-2021-0081 X-Force 216835 security vulnerability
Summary Apache Lucene PRISMA-2021-0081 X-Force 216835 security vulnerability in FileNet Content Manager FNCM / IBM Content CortexCCx Content Search Services CSS/Enterprise Content Management Text Search ECMTS. CSS/ECMTS is affected and is potentially vulnerable. Vulnerability Details Refer to the...
CVE-2026-65591
n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legac...
CVE-2026-62487
CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...
