15235 matches found
binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution,...
PYSEC-2026-2440 dbt-common's commonprefix() doesn't protect against path traversal
Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...
PT-2026-57875
Name of the Vulnerable Software and Affected Versions OpENer version 2.3.0 Description An issue exists when parsing incoming Common Industrial Protocol CIP network packets where the length parameter is inconsistently typed across the call stack. An upstream length calculated as an int is passed t...
Antiproof: Synthesizing Vulnerability Detectors and Proofs of Exploitability
Discovering vulnerabilities before attackers exploit them requires high recall and reliable automatic validation, but existing approaches struggle to achieve both without prohibitive cost. We present Antiproof, an end-to-end vulnerability discovery system that combines neuro-symbolic detector...
openSUSE 16: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (openSUSE-SU-2026:21273-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21273-1 advisory. This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in glamorfontget can lead to a heap buffer...
CVE-2026-51536
In OpENer 2.3.0 commit 76b95cf when parsing incoming CIP Common Industrial Protocol network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 a 16-bit signe...
CVE-2026-51536
In OpENer 2.3.0 commit 76b95cf when parsing incoming CIP Common Industrial Protocol network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 a 16-bit signe...
ALSA-2026:38500 Important: maven:3.9 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model POM, Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fixes: org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Travers...
CVE-2026-15509
creationtimestamp| type| source ---|---|--- 2026-07-12 23:30:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqidht6uyw2y 2026-07-13 00:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqifj3uwyz27 2026-07-13 03:15:07+00:00| seen|...
CVE-2020-1341
creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/6998 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6998 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6998...
Chromium: CVE-2026-13819 Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-59162
creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbfhhklg2a 2026-07-10 23:13:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdblki2rc27 2026-07-10 23:45:18+00:00| seen|...
CVE-2026-11914
vulnerability in Drupal Composer allows . This issue affects Composer versions:...
CVE-2026-57850
creationtimestamp| type| source ---|---|--- 2026-07-10 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd26b42is2l 2026-07-11 02:14:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdlp4gial27...
CVE-2026-61450
creationtimestamp| type| source ---|---|--- 2026-07-10 16:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclzktvii26 2026-07-10 20:16:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqcxq5tkwy25 2026-07-10 23:27:04+00:00| seen|...
CVE-2026-1946
creationtimestamp| type| source ---|---|--- 2026-07-10 11:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3kha2x42k 2026-07-10 12:13:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4purzdp2c 2026-07-10 21:14:43+00:00| seen|...
BELL-CVE-2026-10037 CVE-2026-10037 does not affect BellSoft software
Bulletin has no description...
UBUNTU-CVE-2026-44918
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...
Malicious code in cookie-js-ease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2908ef4ab9f019d4675b39066f876acb959cd9814b47bb66f8f4554c517abe0d [email protected] impersonates the popular js-cookie library same repository URL, banner comment, API surface, and reused upstream author name...