GHSA-CJC8-G9W8-CHFW vulnerabilities

Vulnerabilities for packages: imagemagick...

RockyLinux 8 : .NET 8.0 (RLSA-2026:8468)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8468 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

GHSA-VMW5-396H-99JH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QG3C-XM7Q-9C4X vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5898 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, teleport-operator-fips, kubescape, skaffold, gitsign, cg, crossplane, docker-cli-buildx-fips, kyverno-policy-reporter-plugins-kyverno, gh, ratify-fips, slsa-verifier, spire-server-fips, ko, trivy-operator, zarf, goreleaser, ko-fips, falcoctl-fips,...

CVE-2026-27769

creationtimestamp| type| source ---|---|--- 2026-04-15 12:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjvk3msii2m 2026-04-16 11:35:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcwqgahd2b...

Use of a Broken or Risky Cryptographic Algorithm

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm due to the generateCTR process in G3413CTRBlockCipher. An attacker can recover relationships between...

Linux Distros Unpatched Vulnerability : CVE-2026-6358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML...

CVE-2026-6179 Stored Cross Site Scripting in NightWolf Penetration Testing Platform

Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...

CVE-2026-6005

A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematologyprint.php. Executing a manipulation of the argument hemid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 30, 2026 to April 5, 2026)

Last week, there were 56 vulnerabilities disclosed in 50 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 38 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to...

CVE-2026-33780

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 22:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ufqogbt2i...

GHSA-53MR-6C8Q-9789 vulnerabilities

Vulnerabilities for packages: litellm, airflow...

CVE-2026-5907

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-11 16:10:06+00:00| seen| Telegram/wpaceAWiHnKeB1QgDBbSEs0CV1Y0qbWjZiA4LmSBc26yhc 2026-04-12 20:00:00+00:00| seen|...

PT-2026-31328

Name of the Vulnerable Software and Affected Versions QD 20230821 affected versions not specified Description QD 20230821 is susceptible to a Server-side request forgery SSRF condition. This occurs when a crafted request is processed, allowing for potential unauthorized access or actions on...

EUVD-2026-19688

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-5636

creationtimestamp| type| source ---|---|--- 2026-04-06 10:21:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit26j4rvh2i...

PT-2026-30381

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in bashToolHasPermission inside src/tools/BashTool/bashPermissions.ts. When the sandbox auto-allow feature is active and no explicit deny rule is...

CVE-2026-5475

A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFESBTransmitMsg of the file cfesbpriv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but...