18413 matches found
Linux Kernel Common Function Heap Buffer Overflow DoS
The vulnerability of the common function in the arch/x86/kernel/asm-offsets.c module, which is part of the Linux operating system’s x86 kernel support, involves a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel CIFS DoS
The vulnerability of the cifskillsb function in the fs/cifs/cifs.c module of the Linux operating system’s file system support module is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-3189: Server-Side Request Forgery (SSRF)
A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability affects unknown code of the file /api/admin/common/files/download. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be executed remotely. Attacks ...
Arbitrary Code Injection
Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...
CVE-2026-3057
creationtimestamp| type| source ---|---|--- 2026-02-24 06:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflislqsqa2n...
CVE-2026-3067
CVE-2026-3067 affects HummerRisk up to version 1.5.0, targeting the Archive Extraction code path in hummer-common-core: CommandUtils.extractTarGZ and extractZip. The issue enables path traversal via manipulation of extracted archives, and is remotely exploitable. Public disclosure of the exploit ...
EUVD-2026-7396
A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the file hummer-common/hummer-common-core/src/main/java/com/hummer/common/core/utils/CommandUtils.java of the component Archive Extraction. The manipulation leads to path traversal...
HummerCloud HummerRisk path traversal vulnerability
HummerCloud HummerRisk is an open-source cloud-native security platform developed by HummerCloud Corporation. It addresses security and governance issues in cloud-native environments in a non-invasive manner. Its core capabilities include security governance for hybrid clouds and cloud-native...
PT-2026-21781
Name of the Vulnerable Software and Affected Versions Genetec Update Service affected versions not specified Description A local administrator may be able to obtain information from the Genetec Update Service configuration web page. An authenticated Windows user with administrator privileges coul...
ROS-20260224-73-0009
A vulnerability in the Apache Common Text library of FileMaker Server is related to improper control of code generation when using interpolation functions. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
Data Breaches in 2026: What’s old, what’s new?
Data breaches in 2026 explained, new cyber threats, AI driven attacks, common breach causes, and practical security strategies for individuals and businesses...
DEBIAN-CVE-2025-61147
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...
CVE-2026-2945 JeecgBoot uploadImgByHttp server-side request forgery
A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack may be launched remotely. The exploit has bee...
PT-2026-21457
Name of the Vulnerable Software and Affected Versions UTT HiPER 810G versions up to 1.7.7-1711 Description A buffer overflow condition exists in the strcpy function within the /goform/formTaskEdit ap file of UTT HiPER 810G. The issue stems from manipulating the txtMin2 argument. This allows for...
DEBIAN-CVE-2026-27205
Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...
CVE-2020-8165
creationtimestamp| type| source ---|---|--- 2026-02-21 05:21:02+00:00| seen| https://gist.github.com/tu-trinh-scale/43724f4565a68c378a712b69b412cbe1 2026-04-14 10:27:03+00:00| seen| https://gist.github.com/zhaog100/f7442a42e06d52a6f0350990fe3b28f1...
ROOT-APP-PYPI-CVE-2022-38054 CVE-2022-38054 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-38054 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
CVE-2017-4182
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2026-26267
creationtimestamp| type| source ---|---|--- 2026-02-19 21:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaigszi7j2d 2026-02-20 21:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfd33y3zxk23...