CVE-2026-5131

creationtimestamp| type| source ---|---|--- 2026-04-17 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-5131 2026-04-17 14:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp46v4ca222...

CVE-2026-25599

creationtimestamp| type| source ---|---|--- 2026-04-16 22:11:24+00:00| seen| https://www.cert.si/en/cve-2026-25599 2026-06-01 13:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna5bhwura2j...

CVE-2026-6351

creationtimestamp| type| source ---|---|--- 2026-04-15 18:45:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10843-9ff91-2.html 2026-04-16 05:18:09+00:00| seen| Telegram/RpCSTqHfWBqrKG53EyhvOrMVfWJfX1b8PG9fT94i9MHNW6c 2026-04-16 05:18:17+00:00| seen|...

CVE-2026-6348

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10840-ba9b9-2.html 2026-04-16 05:18:09+00:00| seen| Telegram/RpCSTqHfWBqrKG53EyhvOrMVfWJfX1b8PG9fT94i9MHNW6c 2026-04-16 07:30:38+00:00| seen|...

CVE-2026-6296

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 23:26:09+00:00| seen| Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg 2026-04-16 09:33:38+00:00| seen|...

CVE-2026-6298

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-19 02:43:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswmnvypc2k 2026-04-19 20:00:00+00:00| seen...

CVE-2026-6303

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-16 11:16:12+00:00| seen| Telegram/j-zpZhFSipqPFVaOoufvpDRNhg2whahduAHfYT4AdF4gH4 2026-04-19 20:00:00+00:00| seen|...

CVE-2026-6305

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 23:26:33+00:00| published-proof-of-concept| Telegram/Dn6UYWmEFhbqEaa4T9ZHT6FP05ZyLAZt2ntZ1ss8t6QaCo0 2026-04-17...

LDAP Injection

Overview Affected versions of this package are vulnerable to LDAP Injection via the parseDN handling and the LDAP store helpers in X509LDAPCertStoreSpi and LDAPStoreHelper. An attacker can influence LDAP search filters by supplying a crafted X.500 subject or issuer string that is parsed into an...

DEBIAN-CVE-2026-39984

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint...

PT-2026-33182

Name of the Vulnerable Software and Affected Versions Istio versions 1.25.0 through 1.27.8 Istio versions 1.28.0 through 1.28.5 Istio versions 1.29.0 through 1.29.1 Description In the AuthorizationPolicy, the serviceAccounts and notServiceAccounts fields incorrectly interpret dots . as regular...

GHSA-XM5M-WGH2-RRG3 Sigstore Timestamp Authority has Improper Certificate Validation in verifier

Authorization bypass via certificate bag manipulation in sigstore/timestamp-authority verifier An authorization bypass vulnerability exists in sigstore/timestamp-authority verifier timestamp-authority/v2/pkg/verification: VerifyTimestampResponse function correctly verifies the certificate chain b...

Siemens TPM 2.0

SUMMARY The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and recommends to update to the...

CVE-2026-6139

A vulnerability has been found in Totolink A7100RU 7.4cu.2313b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument FileName leads to os command injection. The attack can be launched remotely. The...

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU 7.4cu.2313b20191024 version contains a vulnerability related to operating system command injection. This vulnerability stems from improper handling of the parameter “FileName” in the function...

CVE-2019-25712

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25712 2026-04-12 14:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclothsug2m...

CVE-2019-25713

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25713 2026-04-12 15:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmjpdcwy2a 2026-04-17 16:07:08+00:00| seen|...

CVE-2019-25710

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25710 2026-04-12 15:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmsntnnf2o 2026-04-17 15:07:08+00:00| seen|...

CVE-2019-25706

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25706 2026-04-12 14:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck6lqblp2m...

CVE-2019-25703

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25703 2026-04-12 14:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjts3lda2r...