DEBIAN-CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

DEBIAN-CVE-2026-11586

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages...

CVE-2026-54408

creationtimestamp| type| source ---|---|--- 2026-07-03 07:05:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy7nokut2p 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-13 03:37:06+00:00| seen|...

CVE-2026-11352

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can...

SUSE CVE-2026-56016

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...

CVE-2026-13117

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage...

CVE-2025-66035 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

DEBIAN-CVE-2026-53357

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

CVE-2021-36776 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

Mercurial Improper Certificate Validation vulnerability

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack...

PYSEC-2026-665 Mercurial Improper Certificate Validation vulnerability

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack...

Security Bulletin: The IBM Common Licensing using IBM® SDK, Java™ Technology Edition affected by multiple vulnerabilities

Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their January 2026 Critical Patch Update. For more information please refer to Oracle's January 2026 CPU Advisory and the CVE links referenced below. IBM Common Licensing i...

CVE-2026-14125

creationtimestamp| type| source ---|---|--- 2026-07-02 08:18:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:47:19+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-14100

creationtimestamp| type| source ---|---|--- 2026-07-02 08:15:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-46073

creationtimestamp| type| source ---|---|--- 2026-07-02 06:49:43+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-13987

creationtimestamp| type| source ---|---|--- 2026-07-02 04:20:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6la3e4l2b 2026-07-02 04:20:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn6ld3aon2g 2026-07-02 07:48:23+00:00| seen|...

CVE-2026-24240

creationtimestamp| type| source ---|---|--- 2026-07-02 02:00:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwo7elco2q 2026-07-02 08:14:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnln7peqr2m...

AlmaLinux 9 : xorg-x11-server (ALSA-2026:26610)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:26610 advisory. xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch...

CVE-2026-14064

creationtimestamp| type| source ---|---|--- 2026-07-01 23:55:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmpq7a5cs2y 2026-07-02 07:51:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 18:55:07+00:00| seen|...

CVE-2026-14113

creationtimestamp| type| source ---|---|--- 2026-07-01 21:49:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmioz3n2p24 2026-07-02 01:49:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmw4ubgif2u 2026-07-02 08:17:25+00:00| seen|...