GHSA-2X8M-83VC-6WV4

creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM...

GHSA-F6HC-C5JR-878P

creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM...

CVE-2026-3259

creationtimestamp| type| source ---|---|--- 2026-04-23 11:16:37+00:00| seen| Telegram/wFSQsgW7X9YvnPcwQoIwWZcAEOwcl2-nLfGCKL8FlikswBY...

GHSA-47HF-23PW-3M8C

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:15+00:00| seen| Telegram/Np0HDJKgovD5cW8jduvZL9F8almQ8yF8RTJlUUKmbI8o04...

GHSA-68QG-G8MG-6PR7

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:00+00:00| seen| Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY...

GHSA-WG33-J3RV-JQ72

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng...

SUSE CVE-2026-31440

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the device is reset, causing the configuration registers to go back to their default state, which is zero. As the driver is checking if the event log...

SUSE CVE-2026-31443

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is not supported by the hardware, and an error that causes Function Level Reset FLR is received, the driver will try to restore the...

SUSE CVE-2026-31453

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaildpushitem calls ioppush, the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free th...

PT-2026-34785

OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to collide. Attackers can exploit weak deduplication scoping to cause silent message suppression and disrupt bot workflows...

Oracle Siebel Server <= 26.2 (April 2026 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory. - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: REST Jettison. Supported versions that are affected are...

GHSA-4JJR-VMV7-WH4W

creationtimestamp| type| source ---|---|--- 2026-04-22 23:21:08+00:00| seen| Telegram/oyZMMan-s6Tiqp0E7GyRtqQJ5Rv8-WlZqCZQGxoSrT1vjc4...

GHSA-2HX3-VP6R-MG3F

creationtimestamp| type| source ---|---|--- 2026-04-22 23:20:31+00:00| seen| Telegram/n2iRBZnq9E7ZcL0orkFwrYjYuWJ0gfdHv4rT79OW1qv3c...

GHSA-PFCQ-4GJR-6GJM

creationtimestamp| type| source ---|---|--- 2026-04-22 23:20:31+00:00| seen| Telegram/n2iRBZnq9E7ZcL0orkFwrYjYuWJ0gfdHv4rT79OW1qv3c...

CVE-2026-5694

creationtimestamp| type| source ---|---|--- 2026-04-22 21:20:45+00:00| seen| Telegram/cDitVeBI8oWCcnnyaubtTUI3HbowCaMK9JXw2ugv50fhLs...

CVE-2026-40937

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-alpha.94, all four notification target admin API endpoints in rustfs/src/admin/handlers/event.rs use a checkpermissions helper that validates authentication only access key + session token, without performing any...

CVE-2009-1285

creationtimestamp| type| source ---|---|--- 2026-04-22 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgsuhew2t...

locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor

Summary Versions of the locize client SDK the browser module that wires up the locize InContext translation editor prior to 4.0.21 register a window.addEventListener"message", … handler that dispatches to registered internal handlers editKey, commitKey, commitKeys, isLocizeEnabled,...

CVE-2026-40937

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-alpha.94, all four notification target admin API endpoints in rustfs/src/admin/handlers/event.rs use a checkpermissions helper that validates authentication only access key + session token, without performing any...

CVE-2026-40937 RustFS missing admin authorization on notification target endpoints, which allows unauthenticated configuration of event webhooks

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-alpha.94, all four notification target admin API endpoints in rustfs/src/admin/handlers/event.rs use a checkpermissions helper that validates authentication only access key + session token, without performing any...