CVE-2026-47898

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

EUVD-2026-41517

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

CVE-2026-47898

This CVE affects Lucene.Net.Analysis.Common (PatternParser) in Lucene.Net.Analysis.Common: vulnerable in versions prior to 4.8.0-beta00018. The connected Snyk entry confirms an XML External Entity (XXE) injection vulnerability, where crafted XML could trigger external entity resolution, enabling ...

CVE-2026-47898

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

DEBIAN-CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

DEBIAN-CVE-2026-11586

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages...

CVE-2026-54408

creationtimestamp| type| source ---|---|--- 2026-07-03 07:05:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy7nokut2p 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-13 03:37:06+00:00| seen|...

CVE-2026-11352

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can...

UBUNTU-CVE-2026-49838

Unknown description...

CVE-2026-13117

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage...

CVE-2025-66035 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

DEBIAN-CVE-2026-53357

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

CVE-2021-36776 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

PYSEC-2026-665 Mercurial Improper Certificate Validation vulnerability

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack...

CVE-2026-14125

creationtimestamp| type| source ---|---|--- 2026-07-02 08:18:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:47:19+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-14100

creationtimestamp| type| source ---|---|--- 2026-07-02 08:15:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-46073

creationtimestamp| type| source ---|---|--- 2026-07-02 06:49:43+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-13987

creationtimestamp| type| source ---|---|--- 2026-07-02 04:20:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6la3e4l2b 2026-07-02 04:20:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn6ld3aon2g 2026-07-02 07:48:23+00:00| seen|...

CVE-2026-24240

creationtimestamp| type| source ---|---|--- 2026-07-02 02:00:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwo7elco2q 2026-07-02 08:14:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnln7peqr2m...

AlmaLinux 9 : xorg-x11-server (ALSA-2026:26610)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:26610 advisory. xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch...