23599 matches found
CVE-2026-17601
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...
ROOT-OS-DEBIAN-13-CVE-2025-40166 CVE-2025-40166 in linux - Patched by Root
Root has patched CVE-2025-40166 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-31409 CVE-2026-31409 in linux - Patched by Root
Root has patched CVE-2026-31409 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-46086 CVE-2026-46086 in linux - Patched by Root
Root has patched CVE-2026-46086 in the linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-18969
A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attac...
ROOT-OS-DEBIAN-11-CVE-2025-38226 CVE-2025-38226 in linux - Patched by Root
Root has patched CVE-2025-38226 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-23141 CVE-2025-23141 in linux - Patched by Root
Root has patched CVE-2025-23141 in the linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-24254
creationtimestamp| type| source ---|---|--- 2026-08-04 18:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dqxjsusacosnh 2026-08-04 19:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpr5hku22m 2026-08-05 09:30:27+00:00| seen|...
RHEL 9 : pipewire (RHSA-2026:47082)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47082 advisory. PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary co...
CVE-2026-13339
creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtm67nw2n 2026-08-02 08:36:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ldebc5q2e 2026-08-02 08:36:59+00:00| seen|...
CVE-2026-67336
creationtimestamp| type| source ---|---|--- 2026-08-01 15:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqemwqfs2l 2026-08-01 20:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2flwuo23 2026-08-01 21:59:21+00:00| seen|...
CVE-2026-65310
creationtimestamp| type| source ---|---|--- 2026-07-31 09:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7a4bpwbxcymga 2026-07-31 14:34:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrx6em7wg22g...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-64870
creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxtesop7dg2u...
CVE-2026-7260
creationtimestamp| type| source ---|---|--- 2026-07-30 12:19:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ecr6xcbeftyzl 2026-07-30 12:49:14+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mruhzvp5622t 2026-07-30 13:29:27+00:00| seen|...
CVE-2026-17716
Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic. Chromium security severity: High...
CVE-2026-44943
CVE-2026-44943 is a path traversal in open-iscsi up to commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e, allowing remote MITM attackers to create root-owned files outside the database and inject lines into the record. Affected product: open-iscsi. Root cause: improper limitation of a pathname to a...
CVE-2023-31606
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14254 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14254 2026-07-31 00:00:26+00:00| published-proof-of-concept| https://t.me/CVEhub/14254...
CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....