59075 matches found
CVE-2026-41907
uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes small buf or large offset. This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0...
CVE-2026-31665
creationtimestamp| type| source ---|---|--- 2026-04-24 18:07:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116461014638911540 2026-04-27 20:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkiuc3bley2w 2026-05-05 20:00:00+00:00| seen|...
CVE-2026-23422
creationtimestamp| type| source ---|---|--- 2026-04-24 17:19:23+00:00| published-proof-of-concept| Telegram/izuLnFsi0kO0A2H5Dx71PRMcc4LiTVfuRwLjXwzmOGc60yQ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-07-28...
GHSA-3JVJ-V6W2-H948 Lemmy has SSRF in /api/v3/post via Webmention dispatch
Summary Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends a Webmention to the attacker-controlled link target. The submitted URL is checked for syntax and scheme, but th...
Lemmy has SSRF in /api/v3/post via Webmention dispatch
Summary Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends a Webmention to the attacker-controlled link target. The submitted URL is checked for syntax and scheme, but th...
CVE-2026-31670
In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create an unlimited number of rfkill events if the system is so configured, while not consuming them from the rfkill file descriptor, causin...
DEBIAN-CVE-2026-31567
In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARNON from pmrestoregfpmask Commit 35e4a69b2003f "PM: sleep: Allow pmrestrictgfpmask stacking" introduced refcount-based GFP mask management that warns when pmrestoregfpmask is called with savedgfpcount ...
CVE-2026-31670 net: rfkill: prevent unlimited numbers of rfkill events from being created
In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create an unlimited number of rfkill events if the system is so configured, while not consuming them from the rfkill file descriptor, causin...
CVE-2026-25262
creationtimestamp| type| source ---|---|--- 2026-04-24 14:30:06+00:00| seen| https://t.me/truesecator/8141 2026-04-24 15:35:55+00:00| seen| https://t.me/xakepru/19303 2026-05-06 00:21:12+00:00| seen| https://notnow.dev/objects/cb0f51ab-513a-484f-8edd-624c60fcf616 2026-06-22 18:20:54+00:00| seen|...
CVE-2026-40976
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e 2026-04-27 05:23:49+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mkhdcsbjs22h 2026-04-28 01:01:21+00:00| seen|...
CVE-2026-40975
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e...
CVE-2026-40972
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e 2026-04-28 01:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjf2yw4gh2k 2026-04-28 09:27:42+00:00| seen|...
CVE-2026-40532
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...
CVE-2026-40530
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...
CVE-2026-6043
P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user accounts, enumerate existing users, authenticate to accounts with no password set, and access depot contents via the...
EUVD-2026-25415
P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user accounts, enumerate existing users, authenticate to accounts with no password set, and access depot contents via the...
CVE-2026-6043 Insecure Default Configuration in P4 Server
P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user accounts, enumerate existing users, authenticate to accounts with no password set, and access depot contents via the...
CVE-2026-1952
creationtimestamp| type| source ---|---|--- 2026-04-24 08:14:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mka3hcifxf2t 2026-04-24 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116458863177154548 2026-04-24 09:00:31+00:00| seen|...