685 matches found
GO-2025-3381 vulnerabilities
Vulnerabilities for packages: flux, flux-source-controller, kyverno-notation-aws...
GHSA-RM43-82J9-R4MJ
creationtimestamp| type| source ---|---|--- 2026-08-13 15:33:17+00:00| seen| https://gist.github.com/alon710/d62f1422f9dac4c6a1fc5e9b8b380828...
GHSA-X692-Q9X7-8C3F
creationtimestamp| type| source ---|---|--- 2026-08-12 19:00:03+00:00| seen| https://t.me/GithubRedTeam/97769 2026-08-13 00:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97769 2026-08-15 08:00:06+00:00| seen| Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM 2026-08-1...
CGA-7H9F-9CJ5-242V
Bulletin has no description...
CLEANSTART-2026-AB32653 Security fixes in istio 1.28.5-r0
Package istio version 1.28.5-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...
CVE-2026-13800
An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500108770...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-60268
creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 05:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrm4ssvmzg2y...
CVE-2026-60937
...
CVE-2026-60651
CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...
CVE-2026-60556
...
RLSA-2026:39771 Important: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
CVE-2026-10103 Authenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channels
Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local users or other remotes via crafted sync messages referencing...
ALSA-2026:36541 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43074 kernel: net: mana: Fix double destroyworkqueue on service rescan PCI path CVE-2026-43276 kernel: net/ipv6: ioam6:...
CVE-2026-59709 Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check
Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when processing the Impersonation-Id header, allowing read-only access grantees to modify portfolio holding tags. Attackers with valid read-only share tokens can assign or remove...
PT-2026-55488
Name of the Vulnerable Software and Affected Versions PHP versions 8.2.0 through 8.2.31 PHP versions 8.3.0 through 8.3.31 PHP versions 8.4.0 through 8.4.22 PHP versions 8.5.0 through 8.5.7 Description The OpenSSL extension contains a buffer allocation flaw in the AES-WRAP-PAD algorithm...
CVE-2026-14046
creationtimestamp| type| source ---|---|--- 2026-07-01 21:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhgxkheu2y 2026-07-02 07:50:30+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:26+00:00| seen|...
CVE-2026-57915 Apache Kerby: Kerberos Pre-Authentication Bypass
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue...
libpng security update
An update is available for libpng. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpng packages contain a library of functions for creating and manipulati...
