58873 matches found
CVE-2026-15182
creationtimestamp| type| source ---|---|--- 2026-07-10 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqc2t473jw2c...
CVE-2026-56814 Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)
Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed resources, allowing an unauthenticated remote attacker to cause denial of service. The parser charges the :length limit only for part...
CVE-2026-40008
creationtimestamp| type| source ---|---|--- 2026-07-10 11:04:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbyv3qycz22 2026-07-10 12:15:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40008 2026-07-10 13:21:41+00:00| seen|...
CVE-2026-38076
A flaw was found in jbig2dec. An integer overflow vulnerability in the jbig2arithiaidctxnew function allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted input. This can lead to the affected system becoming unresponsive or crashing, disrupting its normal...
CVE-2026-40008
Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName.newInstance without any validation or allowlisting. This issue affects Apache IoTDB:...
CVE-2026-21045
creationtimestamp| type| source ---|---|--- 2026-07-10 08:12:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbpamuqba27 2026-07-10 09:54:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbux2ewhl2e 2026-07-10 12:46:38+00:00| seen|...
CVE-2026-12685
creationtimestamp| type| source ---|---|--- 2026-07-10 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116894507132740931 2026-07-10 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqbmvjqo2j2d 2026-07-10 08:10:09+00:00| seen|...
CVE-2026-12123
The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.8.5 via the 'vdl' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locatio...
CVE-2026-11818
creationtimestamp| type| source ---|---|--- 2026-07-10 05:39:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgohp3n22f 2026-07-10 20:11:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxgpgezc2y...
CVE-2026-11392
creationtimestamp| type| source ---|---|--- 2026-07-10 05:38:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgn4q6ib2x 2026-07-10 05:38:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqbgniwg4v2k...
CVE-2026-21053
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...
decompress: Decompress: File disclosure and corruption via arbitrary hardlink creation
A flaw was found in decompress. An attacker can craft a malicious archive that, when extracted, allows for arbitrary hardlink creation. This vulnerability occurs because the x.linkname field from hardlink entries in the archive is processed without proper validation, enabling an attacker to creat...
EUVD-2026-42823
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...
CVE-2026-21053
CVE-2026-21053 describes an inability to properly validate input in Samsung Email before 6.2.13.1, allowing local attackers to create arbitrary files inside the app sandbox. Affected product/version: Samsung Email prior to 6.2.13.1. Root cause: improper input validation in the application. Impact...
DEBIAN-CVE-2026-44918
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...
CVE-2026-44918
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...
CVE-2026-44918
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...
GHSA-2PG6-44CX-C49V
creationtimestamp| type| source ---|---|--- 2026-07-10 04:12:07+00:00| seen| https://gist.github.com/alon710/894d931a4bc3b7f3c7f80c92512208e5...