DEBIAN-CVE-2026-54275

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain, but with different per-request serverhostname...

PT-2026-51203

Name of the Vulnerable Software and Affected Versions Edimax BR-6478AC V2 version 1.23 Description A buffer overflow can be triggered remotely via the POST Request Handler. The issue exists within the formWlSiteSurvey function located in the /goform/formWlSiteSurvey file, specifically through the...

CVE-2007-3500

creationtimestamp| type| source ---|---|--- 2026-06-20 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moomhxmepg2k...

CVE-2013-5054

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:36+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/47e6ca37-631f-4aad-8675-da6303dde0a1 2026-06-23 14:04:08+00:00| exploited|...

CVE-2026-12301

creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-35316

...

CVE-2026-8443

creationtimestamp| type| source ---|---|--- 2026-06-16 07:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof7zbnval2y 2026-06-16 09:17:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofhpn2qmv2x...

ROOT-APP-PYPI-CVE-2026-41066 CVE-2026-41066 in rootio-lxml - Patched by Root

Root has patched CVE-2026-41066 in the rootio-lxml package for Root:PyPI. Multiple fixed versions available...

VulnCheck KEV: CVE-2026-10735

Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 Pro smart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Produ...

CVE-2026-48049 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-11664 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-46520

creationtimestamp| type| source ---|---|--- 2026-06-11 05:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnygzyjcyh2n...

CVE-2026-45257

creationtimestamp| type| source ---|---|--- 2026-06-10 21:43:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxoldhoq72z 2026-06-10 22:08:57+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3mnxpyp62lc2t 2026-06-11 00:53:06+00:00| seen|...

CVE-2026-46612

creationtimestamp| type| source ---|---|--- 2026-06-10 19:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgfz4oop24...

CVE-2026-47913

creationtimestamp| type| source ---|---|--- 2026-06-10 09:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxp5yde2q...

CVE-2026-48563

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review...

CVE-2026-45596

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review...

UBUNTU-CVE-2026-42770

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

DEBIAN-CVE-2026-46305

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: osdep: avoid NULL pointer dereference in rtwcbufalloc The return value of kzallocflex is used without ensuring that the allocation succeeded, and the pointer is dereferenced unconditionally. Guard the access t...

DEBIAN-CVE-2020-37248

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext...