13547 matches found
EUVD-2026-24051
UNSUPPORTED WHEN ASSIGNED An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00ABDV.3C0 could allow an adjacent attacker on the WLAN to cause a denial-of-service DoS condition in the web management interface by convincing an authenticated...
Oracle Life Sciences Empirica Signal 安全漏洞
Oracle Life Sciences Empirica Signal is a drug safety signal detection platform developed by Oracle Corporation. Versions 9.2.1 to 9.2.3 of Oracle Life Sciences Empirica Signal contain security vulnerabilities. These vulnerabilities stem from issues with the Common Core component, allowing...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010951)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010951 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifscopyfilerange If the file is used by swap, before return -EOPNOTSUPP,...
PT-2026-34067
Name of the Vulnerable Software and Affected Versions Oracle Life Sciences Empirica Signal versions 9.2.1 through 9.2.3 Description An issue in the Common Core component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...
PT-2026-34121
Name of the Vulnerable Software and Affected Versions Oracle HCM Common Architecture versions 12.2.3 through 12.2.15 Description An issue in the Knowledge Integration component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle HCM Comm...
SUSE SLES15 Security Update : kubernetes-old (SUSE-SU-2026:1489-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1489-1 advisory. This update for kubernetes-old rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description blo...
CVE-2026-23752
creationtimestamp| type| source ---|---|--- 2026-04-20 19:58:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxawex4jp2h...
CVE-2026-42199
creationtimestamp| type| source ---|---|--- 2026-04-20 18:42:12+00:00| published-proof-of-concept| https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp 2026-05-08 22:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlesrz5rvk2i...
CVE-2026-31429
creationtimestamp| type| source ---|---|--- 2026-04-20 11:37:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwew4fcs32k 2026-04-24 09:00:04+00:00| published-proof-of-concept| Telegram/eiq80vTfK0uEvpSaVkLstXl9YEDfyEgGUyA39bKhe3J3sOM 2026-04-24 21:00:04+00:00|...
CVE-2026-3517
creationtimestamp| type| source ---|---|--- 2026-04-20 11:13:25+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-371 2026-04-20 15:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwt7avbvg2e 2026-04-20 17:21:16+00:00| seen|...
OPENSUSE-SU-2026:20566-1 Security update for Botan
This update for Botan fixes the following issue: - CVE-2026-32884: Certificate validation bypass due to mixed-case Common Name in X.509 certificates bsc1261993...
CVE-2026-6563
creationtimestamp| type| source ---|---|--- 2026-04-19 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116430551736901385 2026-04-19 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjtlp2da3t22 2026-04-19 09:34:22+00:00| seen|...
Global Web, Local Privacy? an International Review of Web Tracking
Web tracking by ad networks, social networks, and other third parties is privacy-invasive. To protect users' privacy an increasing number of countries are adopting new privacy laws. However, a major reason why their application on the web is so challenging is that privacy laws are local while the...
ruby: WEBrick CGI source disclosure
Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus, 2 %2b encode...
CVE-2026-31317
creationtimestamp| type| source ---|---|--- 2026-04-17 18:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpjen3chh22 2026-04-20 20:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxbyegapb2q...
cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier
A flaw was found in OpenPrinting CUPS. A remote attacker can exploit a path traversal vulnerability in the RSS notifier by manipulating the notify-recipient-uri. This allows writing arbitrary RSS XML data to sensitive files outside the intended directory. This can lead to a denial of service DoS ...
CVE-2026-4817
creationtimestamp| type| source ---|---|--- 2026-04-17 06:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjodqwhbqp2f 2026-04-17 08:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjoj6ezi7t2i...
SUSE CVE-2026-40962
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC Common Encryption subsample data to libavformat/mov.c...
