CVE-2026-28582

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:04+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2025-48566

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2025-48564

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-15778

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-20 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-20...

CVE-2026-15775

creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-20 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720...

Updated openssl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion. CVE-2026-7383 Out-of-Bounds Read in CMS Password-Based Decryption. CVE-2026-9076 Heap Buffer Over-read in ASN.1 Content Parsing. CVE-2026-34180 PKCS12 Files with PBMAC1 Are...

CVE-2026-46459

creationtimestamp| type| source ---|---|--- 2026-07-15 16:15:09+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-46458...

Security update for gnutls

This update for gnutls fixes the following issues CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive bsc1263707. CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange...

CVE-2026-6847

creationtimestamp| type| source ---|---|--- 2026-07-13 14:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwi5ogas2x 2026-07-13 15:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjy3psdgu22 2026-07-13 16:15:03+00:00| seen|...

CVE-2026-40553

creationtimestamp| type| source ---|---|--- 2026-07-13 12:15:08+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-40467 2026-07-13 13:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtfjqc2y26 2026-07-13 16:14:50+00:00| seen|...

CVE-2026-40469

creationtimestamp| type| source ---|---|--- 2026-07-13 12:15:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-40467 2026-07-13 13:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtjz4kbz26 2026-07-14 10:42:05+00:00| seen|...

golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to...

CVE-2026-15543 Tenda CH22 CertListInfo formCertListInfo buffer overflow

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2026-15553

creationtimestamp| type| source ---|---|--- 2026-07-13 04:45:04+00:00| seen| https://www.twcert.org.tw/en/cp-139-11032-460c2-2.html 2026-07-13 07:25:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj62a5mcy2w 2026-07-13 08:15:05+00:00| seen|...

CVE-2026-15552

creationtimestamp| type| source ---|---|--- 2026-07-13 04:45:02+00:00| seen| https://www.twcert.org.tw/en/cp-139-11032-460c2-2.html 2026-07-13 07:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj6m56jej2z 2026-07-13 08:15:07+00:00| seen|...

AlmaLinux 9 : podman (ALSA-2026:37123)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37123 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...

ALSA-2026:38504 Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial o...

CVE-2026-40007

creationtimestamp| type| source ---|---|--- 2026-07-10 12:15:43+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40007 2026-07-10 13:15:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqca66s5mz2k 2026-07-10 21:53:24+00:00| seen|...

CVE-2026-15270

creationtimestamp| type| source ---|---|--- 2026-07-10 00:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15270...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: xeol, grype, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, restic, crossplane-provider-aws-route53, kubewatch, docker-compose, cloud-provider-azure, loki, helm-push, tempo, apache-exporter, kubernetes-csi-external-attacher, step-kms-plugin,...