CVE-2026-34851

Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34851

CVE-2026-34851 is described as a race condition in the event notification module with availability impact. Public sources (NVD) list CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH). Huawei CNA notes a lower local-impact vector (AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L, base 2.2, LOW). E...

PT-2026-32232

Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-32386

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800...

PT-2026-32389

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A contention condition vulnerability exists in the Huawei HarmonyOS event notification module, which stems from a failure of the event notification module to...

Pandora FMS 安全漏洞

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. There are security vulnerabilities in versions of Pandora FMS 800 and earlier. These vulnerabilities stem from t...

CVE-2026-40394

creationtimestamp| type| source ---|---|--- 2026-04-12 22:02:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjde5fz7lw2t...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-f5, pulumi, rook, cert-manager-csi-driver, cilium-cli, kubernetes-dashboard-metrics-scraper, cis-operator, flux, argocd-image-updater, polaris, vertical-pod-autoscaler, filebrowser, cluster-api-ipam-provider-in-cluster, custom-pod-autoscaler-operator,...

CVE-2026-39921

creationtimestamp| type| source ---|---|--- 2026-04-10 22:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6deioc5b2z...

GHSA-34W8-5J2V-H6WW

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw...

GHSA-3GQC-XR75-PCPW

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:20+00:00| seen| Telegram/ZRwkJT-g6xqpr38tjocBfuP9bsA0qHKZRvqY91xv80DRmI...

CVE-2026-33703

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...

CVE-2026-31941

creationtimestamp| type| source ---|---|--- 2026-04-10 19:31:11+00:00| seen| Telegram/3GtkgxN8M7sGDIdrzHdivrGnBmd9UO5Jhg1ZnRR2u8dymg 2026-04-10 19:31:17+00:00| published-proof-of-concept| Telegram/5BYtFCja3ItyUAudrFtyDv4j4kJF13U-uq-WjYMkVFgHgE 2026-04-11 07:06:42+00:00| seen|...

CVE-2026-39941

ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied input sent via a the EName and EDesc parameters in EditEventAttendees.php to be rendered in a page without proper output encoding, enabling arbitrary JavaScript execution in victims...

EUVD-2026-21152

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor memory/hooks.py...

CVE-2026-40021

Apache Log4net before version 3.3.0 contains a vulnerability in XmlLayout and XmlLayoutSchemaLog4J where characters forbidden by XML 1.0 are not sanitized in MDC keys/values and the identity field. The issue causes a serialization exception and silent loss of the affected log event, which can be ...

CVE-2026-25018

creationtimestamp| type| source ---|---|--- 2026-04-10 08:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4vsf57bz2r...

CVE-2019-25552

creationtimestamp| type| source ---|---|--- 2026-04-10 02:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj4afk7dmy2w...

openSUSE 16 Security Update : aws-c-event-stream (openSUSE-SU-2026:20477-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20477-1 advisory. Changes in aws-c-event-stream: - CVE-2026-5190: Fixed a out-of-bounds write caused by crafted event-stream messages bsc1261298 Tenable has extracted the...