6033 matches found
Security update for gnutls
This update for gnutls fixes the following issues CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive bsc1263707. CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange...
CVE-2026-6847
creationtimestamp| type| source ---|---|--- 2026-07-13 14:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwi5ogas2x 2026-07-13 15:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjy3psdgu22 2026-07-13 16:15:03+00:00| seen|...
CVE-2026-40553
creationtimestamp| type| source ---|---|--- 2026-07-13 12:15:08+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-40467 2026-07-13 13:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtfjqc2y26 2026-07-13 16:14:50+00:00| seen|...
CVE-2026-40469
creationtimestamp| type| source ---|---|--- 2026-07-13 12:15:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-40467 2026-07-13 13:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtjz4kbz26 2026-07-14 10:42:05+00:00| seen|...
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to...
CVE-2026-15543 Tenda CH22 CertListInfo formCertListInfo buffer overflow
A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-15553
creationtimestamp| type| source ---|---|--- 2026-07-13 04:45:04+00:00| seen| https://www.twcert.org.tw/en/cp-139-11032-460c2-2.html 2026-07-13 07:25:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj62a5mcy2w 2026-07-13 08:15:05+00:00| seen|...
CVE-2026-15552
creationtimestamp| type| source ---|---|--- 2026-07-13 04:45:02+00:00| seen| https://www.twcert.org.tw/en/cp-139-11032-460c2-2.html 2026-07-13 07:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj6m56jej2z 2026-07-13 08:15:07+00:00| seen|...
PT-2026-57666
A vulnerability in Thales CERT "Suspicious" application = 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, and runtime artifacts—leading to a persistent...
ALSA-2026:38504 Important: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial o...
CVE-2026-13014: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Thales CERT "Suspicious" application = 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, and runtime artifacts—leading to a persistent...
AlmaLinux 9 : podman (ALSA-2026:37123)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37123 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...
CVE-2026-40007
creationtimestamp| type| source ---|---|--- 2026-07-10 12:15:43+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40007 2026-07-10 13:15:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqca66s5mz2k 2026-07-10 21:53:24+00:00| seen|...
CVE-2026-15270
creationtimestamp| type| source ---|---|--- 2026-07-10 00:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15270...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: mountpoint-s3-csi-driver, cluster-api-ipam-provider-in-cluster, tfsec, kubewatch, mongo-tools, datadog-agent, pvc-autoresizer, blob-csi, bento, calico, speedtest-go, terraform-provider-google, ingress-nginx-controller, kuberay-operator, descheduler, redis-operator,...
CVE-2026-35188
A flaw was found in OpenSSL. A malicious server can exploit the TLS Online Certificate Status Protocol OCSP stapling feature by sending a specially crafted response. This can trigger a double-free vulnerability in the client's certificate verification process, potentially leading to a Denial of...
CVE-2026-56289
creationtimestamp| type| source ---|---|--- 2026-07-09 12:15:07+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56288 2026-07-09 12:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7nkxwcyq27...
CVE-2026-50644
creationtimestamp| type| source ---|---|--- 2026-07-09 12:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lrrsktt2i 2026-07-09 12:15:09+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-50644...