13532 matches found
CVE-2026-41084
creationtimestamp| type| source ---|---|--- 2026-05-31 12:18:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5kdu3nf22d...
nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification
...
PT-2026-45217
Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5 Description A heap-based buffer overflow exists in the 4x4 Matrix Parser component within the glTFCommon.h library. This issue occurs in the glTFCommon::CopyValue function and can be triggered by a local attacker...
SUSE CVE-2024-43513
unknown...
Chromium: CVE-2026-9878 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-9831
A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued API key to receive response data for another tenant. The issu...
Malicious Package
Overview paychex-common-vendor-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview @timelycare/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-5053 Malicious code in @timelycare/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6971003bc186f038f0e19a64185b47b51e608a4ecf4261a908101f5e046a264d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-48555
creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjx5wbwy2h...
CVE-2026-9831
A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued API key to receive response data for another tenant. The issu...
Security update for gnutls
This update for gnutls fixes the following issues CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive bsc1263707. CVE-2026-5260: lib/pkcs11privkey: guard against overreading on short ciphertexts bsc1263715. CVE-2026-5419: gnutlscipherdecrypt3: make PKCS7 unpadding branch...
BELL-CVE-2026-46085
Bulletin has no description...
BELL-CVE-2026-45930
Bulletin has no description...
BELL-CVE-2026-45839
Bulletin has no description...
BELL-CVE-2026-46215
Bulletin has no description...
BELL-CVE-2026-46132
Bulletin has no description...
BELL-CVE-2026-45871
Bulletin has no description...
PT-2026-44998
Name of the Vulnerable Software and Affected Versions ExtremeCloud IQ affected versions not specified Description A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path can intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued AP...
CVE-2026-46820
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...