59182 matches found
SUSE CVE-2026-23520
Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane's updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to r...
Low-level invalid GF(2^m) parameters lead to OOB memory access
Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution,...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005022)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005022 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA: Verify port when creating flow rule Validate port value provided by the user and with that...
CVE-2026-23890
CVE-2026-23890 affects pnpm, a package manager. A path traversal vulnerability exists in pnpm’s bin linking prior to version 10.28.1, where bin names starting with @ bypass validation and, after scope normalization, path traversal sequences like ../../ remain intact. This enables a malicious npm ...
CVE-2025-38288
creationtimestamp| type| source ---|---|--- 2026-01-26 21:30:29+00:00| seen| Telegram/RI9kXhBuPq5wC8vdLmWReL7J6XxuEUTDnypgn872gf0Hg...
CVE-2025-38295
creationtimestamp| type| source ---|---|--- 2026-01-26 21:30:29+00:00| seen| Telegram/RI9kXhBuPq5wC8vdLmWReL7J6XxuEUTDnypgn872gf0Hg...
CVE-2025-38279
creationtimestamp| type| source ---|---|--- 2026-01-26 21:30:29+00:00| seen| Telegram/RI9kXhBuPq5wC8vdLmWReL7J6XxuEUTDnypgn872gf0Hg...
CVE-2025-9522
creationtimestamp| type| source ---|---|--- 2026-01-26 21:16:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde63zrqeb2t...
CVE-2025-14756
creationtimestamp| type| source ---|---|--- 2026-01-26 20:36:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde3vnmenn2n 2026-01-28 03:27:20+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdhdclewcz2a 2026-01-29 18:38:04+00:00| seen|...
CVE-2020-36958
creationtimestamp| type| source ---|---|--- 2026-01-26 20:31:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde3mp6hwa2c...
CVE-2026-24440
creationtimestamp| type| source ---|---|--- 2026-01-26 20:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde3dqqpmt2m...
CVE-2026-24431
creationtimestamp| type| source ---|---|--- 2026-01-26 19:31:44+00:00| seen| Telegram/NDMU8ynM5NBGoQ-dfQqZ42TSll7FDRAaTneXDBoOWPxOFo 2026-01-26 19:31:53+00:00| seen| Telegram/Ft8Tdl8Bw6eAk2e1pAEkH4ZR5l3Iv8W273PssTBQZEV2KvA...
CVE-2026-22709
creationtimestamp| type| source ---|---|--- 2026-01-26 19:10:38+00:00| seen| https://gist.github.com/alon710/1a9dd02522093ff2ceb805cf35c0f14f 2026-01-26 22:34:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdechvpf7f2g 2026-01-27 01:25:49+00:00| seen|...
CVE-2026-24433
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.195037 contain a stored cross-site scripting vulnerability in the user creation functionality. Insufficient input validation allows attacker-controlled script content to be stored and later executed when administrative users...
CVE-2026-24433
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.195037 contain a stored cross-site scripting vulnerability in the user creation functionality. Insufficient input validation allows attacker-controlled script content to be stored and later executed when administrative users...
CVE-2026-24433 Tenda W30E V2 Stored XSS via Username Field
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.195037 contain a stored cross-site scripting vulnerability in the user creation functionality. Insufficient input validation allows attacker-controlled script content to be stored and later executed when administrative users...
CVE-2026-24433
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.195037 contain a stored cross-site scripting vulnerability in the user creation functionality. Insufficient input validation allows attacker-controlled script content to be stored and later executed when administrative users...
CVE-2026-21509
creationtimestamp| type| source ---|---|--- 2026-01-26 17:40:52+00:00| seen| https://bsky.app/profile/dustinchilds.bsky.social/post/3mdds2s6f7c2j 2026-01-26 18:18:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mddu5zx7rs23 2026-01-26 18:32:41+00:00| seen|...