perl-HTTP-Date-6.80.0-1.1 on GA media (moderate)

perl-HTTP-Date-6.80.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11350-1 Rating: moderate Cross-References: CVE-2026-14741 CVSS scores: CVE-2026-14741 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-14741 SUSE : 6.9...

CVE-2026-43871

creationtimestamp| type| source ---|---|--- 2026-07-24 23:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghvod3i224 2026-07-29 01:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqrz55jbh2s 2026-08-27 11:48:03+00:00| seen|...

CVE-2026-66039

creationtimestamp| type| source ---|---|--- 2026-07-24 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge3vbv4f2c...

CVE-2026-65708

creationtimestamp| type| source ---|---|--- 2026-07-24 19:44:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrg4gq3cvv2y 2026-07-24 20:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fgt7wu2d...

CVE-2026-48021

In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...

CVE-2026-48021

CVE-2026-48021 affects epa4all prior to 2026-05-20. An attacker who can intercept TLS between epa4all and the ePA backend could complete the VAU handshake with attacker-controlled keys, deriving session encryption keys. This allows reading and modifying inner HTTP traffic (including patient conse...

EUVD-2026-48733

In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...

CVE-2026-66027

creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...

CVE-2026-49326

creationtimestamp| type| source ---|---|--- 2026-07-24 16:13:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfqnxvawn2r...

CVE-2026-58630

creationtimestamp| type| source ---|---|--- 2026-07-24 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfphd746x2s 2026-07-24 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftcorn5d2l 2026-07-24 19:09:36+00:00| seen|...

CVE-2026-46452

creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfhbobw7u2s...

CVE-2026-45812

creationtimestamp| type| source ---|---|--- 2026-07-24 13:12:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgkps3ci24...

CVE-2026-66144

creationtimestamp| type| source ---|---|--- 2026-07-24 13:08:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgc365h32s 2026-07-25 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6usosqu2w...

CVE-2026-16634

creationtimestamp| type| source ---|---|--- 2026-07-24 12:29:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfe4h4fah24...

CVE-2026-15687

creationtimestamp| type| source ---|---|--- 2026-07-24 11:17:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116974672857179821...

OESA-2026-3112 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib. An off-by-one...

CVE-2026-56391

creationtimestamp| type| source ---|---|--- 2026-07-24 08:15:04+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56391...

CVE-2026-13066

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

Malicious code in @daylightqc/date-fmt-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c563208137dbdd6b4c26764222942e2b81e815349b596518ff4db5a652b2bf The package declares a postinstall script postinstall.js that runs automatically on npm/pnpm install and POSTs host identifiers hostname, whoami, pwd...