13660 matches found
CVE-2015-3269
creationtimestamp| type| source ---|---|--- 2026-08-02 14:43:02+00:00| seen| https://t.me/informationsec/287 2026-08-03 02:05:52+00:00| seen| https://t.me/informationsec/287...
Linux Distros Unpatched Vulnerability : CVE-2026-66402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and...
CVE-2026-67324
creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwsslzq22 2026-08-01 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2eglt7fr2t 2026-08-01 22:22:01+00:00| seen|...
CVE-2019-14615
creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:04+00:00| seen| https://t.me/nonamepodcast/74 2026-08-02 00:00:20+00:00| seen| https://t.me/nonamepodcast/74...
CVE-2026-66402
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
UBUNTU-CVE-2026-66402
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
CVE-2026-66402
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
EUVD-2026-51851
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
CVE-2026-66402
CVE-2026-66402 affects FreeRDP up to and including 3.28.x, fixed in 3.29.0. The issue arises from TLS identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_utils_get_dns_names(). FreeRDP uses custom Common Name and DNS SAN matching instead of OpenSSL’s length-...
CVE-2026-54787
creationtimestamp| type| source ---|---|--- 2026-07-31 22:32:31+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:23+00:00| seen|...
DEBIAN-CVE-2026-62867
Bulletin has no description...
ROOT-APP-NPM-CVE-2024-29409 CVE-2024-29409 in @rootio/nestjs__common - Patched by Root
Root has patched CVE-2024-29409 in the @rootio/nestjscommon package for Root:npm. Multiple fixed versions available...
UBUNTU-CVE-2026-61893
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
SUSE CVE-2026-49245
unknown...
Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
Summary image.download fetches a URL and writes the response to disk. It does not use the central path guard validatepathwithenvconfig, which confines writes to FLYTOSANDBOXDIR; instead it confines the output to outputdir, but outputdir is itself a caller parameter. Since the attacker sets both t...
CLEANSTART-2026-JO67014 Security fixes in minio-operator 7.0.1-r5
Package minio-operator version 7.0.1-r5 fixes 4 vulnerabilities: CVE-2025-22868, ghsa-6v2p-p543-phr9, CVE-2025-15558, ghsa-p436-gjf2-799p...
CLEANSTART-2026-TR90585 Security fixes in terragrunt-fips 0.97.2-r3
Package terragrunt-fips version 0.97.2-r3 fixes 3 vulnerabilities: CVE-2026-34986, ghsa-xmrv-pmrh-hhx2, ghsa-xmrv-pmrh-hhx2...
CLEANSTART-2026-ZY97357 Security fixes in cloudprober-fips 0.13.9-r0
Package cloudprober-fips version 0.13.9-r0 fixes 8 vulnerabilities: CVE-2026-34986, ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-hfvc-g4fc-pqhx...