58966 matches found
CVE-2026-50630
creationtimestamp| type| source ---|---|--- 2026-06-11 17:38:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrdeb7n62w...
AZL-89765 CVE-2026-44705 affecting package js-jquery 3.5.0-4
tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences e.g., ....
CVE-2026-11839
creationtimestamp| type| source ---|---|--- 2026-06-11 17:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzpbty2jr25 2026-06-11 17:22:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzqgkdawg2w 2026-06-14 23:13:51+00:00| seen|...
CVE-2026-28277
creationtimestamp| type| source ---|---|--- 2026-06-11 16:10:14+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmg7zp4z2u...
EUVD-2026-36264
tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences e.g., ....
CVE-2026-48998
creationtimestamp| type| source ---|---|--- 2026-06-11 14:32:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgxuuio72w...
CVE-2026-4764
creationtimestamp| type| source ---|---|--- 2026-06-11 13:47:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzehbuzqe2m...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation in the ueId validation process in EE subscription handlers. An attacker can cause unauthorized data creation and persistent data corruption by submitting arbitrary identifier values that bypass intended format...
CVE-2026-10733
creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260612...
CVE-2026-40987
creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d 2026-07-12 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88511 2026-07-13 00:00:50+00:00| published-proof-of-concept|...
CVE-2026-10847
creationtimestamp| type| source ---|---|--- 2026-06-11 11:32:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-590 2026-06-11 15:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzijoxr3c2l 2026-06-12 08:46:06+00:00| seen|...
SUSE-SU-2026:2365-1 Security update for cosign
This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Changes for cosign: - update to 3.0.6: Fix DSSE predicate check GHSA-w6c6-c85g-mmv6 4801 Handle whitespace-only certificate...
CVE-2026-53901 Cerebrate before v1.37 allows mass assignment of record identifiers during object creation
Cerebrate before version 1.37 contains a mass-assignment vulnerability in the generic CRUD add path. The add handler attempted to remove an attacker-supplied id from $params before normalizing the request through massageInput. Because the normalized $input could still contain an id field, a user...
CVE-2026-41000
The CVE-2026-41000 issue affects Spring Web Services where Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. This undermines protections against replay of UsernameToken nonces and creation timestamps, as well as Time...
EUVD-2026-36210
Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of UsernameToken nonces and creation timestamps, Timestamp elements, and certain SAML one-time-use semantics could be...
CVE-2026-46520
creationtimestamp| type| source ---|---|--- 2026-06-11 05:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnygzyjcyh2n...
CVE-2026-7368
creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-01 2026-06-11 16:13:04+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmlcnxbg2f 2026-06-12 16:00:57+00:00| seen|...
CVE-2026-48724
creationtimestamp| type| source ---|---|--- 2026-06-11 02:14:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny5psjwgv2x...