27632 matches found
CVE-2026-48021
CVE-2026-48021 affects epa4all prior to 2026-05-20. An attacker who can intercept TLS between epa4all and the ePA backend could complete the VAU handshake with attacker-controlled keys, deriving session encryption keys. This allows reading and modifying inner HTTP traffic (including patient conse...
CVE-2026-66027
creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...
CVE-2026-49326
creationtimestamp| type| source ---|---|--- 2026-07-24 16:13:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfqnxvawn2r...
CVE-2026-58630
creationtimestamp| type| source ---|---|--- 2026-07-24 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfphd746x2s 2026-07-24 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftcorn5d2l 2026-07-24 19:09:36+00:00| seen|...
CVE-2026-46452
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfhbobw7u2s...
CVE-2026-45812
creationtimestamp| type| source ---|---|--- 2026-07-24 13:12:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgkps3ci24...
CVE-2026-66144
creationtimestamp| type| source ---|---|--- 2026-07-24 13:08:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgc365h32s 2026-07-25 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6usosqu2w...
CVE-2026-16634
creationtimestamp| type| source ---|---|--- 2026-07-24 12:29:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfe4h4fah24...
CVE-2026-15687
creationtimestamp| type| source ---|---|--- 2026-07-24 11:17:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116974672857179821...
CVE-2026-56391
creationtimestamp| type| source ---|---|--- 2026-07-24 08:15:04+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56391...
CVE-2026-13066
creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-66140
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...
OESA-2026-3112 glib2 security update
GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib. An off-by-one...
Malicious code in @daylightqc/date-fmt-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c563208137dbdd6b4c26764222942e2b81e815349b596518ff4db5a652b2bf The package declares a postinstall script postinstall.js that runs automatically on npm/pnpm install and POSTs host identifiers hostname, whoami, pwd...
MAL-2026-11041 Malicious code in @daylightqc/date-fmt-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c563208137dbdd6b4c26764222942e2b81e815349b596518ff4db5a652b2bf The package declares a postinstall script postinstall.js that runs automatically on npm/pnpm install and POSTs host identifiers hostname, whoami, pwd...
CVE-2026-16756
creationtimestamp| type| source ---|---|--- 2026-07-24 01:01:22+00:00| seen| https://bsky.app/profile/rindrics.com/post/3mre5olrots2j 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...
CVE-2026-54120
creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3igg2c62a 2026-07-24 13:08:20+00:00| seen| https://bsky.app/profile/thecircuitry.to/post/3mrfgcioxnn2j 2026-07-24 13:30:31+00:00| seen|...
Security update for perl-HTTP-Date (moderate)
openSUSE security update: security update for perl-http-date ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21427-1 Rating: moderate References: bsc1271705 Cross-References: CVE-2026-14741 CVSS scores: CVE-2026-14741 SUSE : 5.3...
PT-2026-64406
Name of the Vulnerable Software and Affected Versions epa4all versions prior to 2026-05-20 Description An attacker capable of intercepting the TLS connection between the application and the ePA backend can complete the VAU handshake using attacker-controlled keys to obtain session encryption keys...