CVE-2026-5063

creationtimestamp| type| source ---|---|--- 2026-05-03 21:24:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116512750014975316 2026-05-06 05:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5xzr7ehn2g 2026-05-16 11:02:06+00:00| seen|...

CVE-2026-42786

creationtimestamp| type| source ---|---|--- 2026-05-03 20:28:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116512528267704627 2026-05-07 05:40:29+00:00| seen| https://gist.github.com/alon710/7e14a0d3fcae150a08d7fce945893208...

gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the IGES and STEP file parsing process. An attacker can cause a denial of service or access unintended memory contents by submitting specially crafted IGES or STEP files that trigger out-of-bounds reads or infinit...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses onnx-1.20.1-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-28500.

Summary IBM Maximo Application Suite - Monitor Component uses onnx-1.20.1-cp311-cp311-manylinux227x8664.manylinux228x8664.whl which is vulnerable to CVE-2026-28500. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-28500 DESCRIPTION: Open Neural...

CVE-2026-42994

creationtimestamp| type| source ---|---|--- 2026-05-01 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116497791564275450 2026-05-01 06:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkrha6jb7626 2026-05-01 06:39:25+00:00| seen|...

Cisco Firepower Threat Defense (FTD) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a...

PT-2026-36494

Name of the Vulnerable Software and Affected Versions Open CASCADE Technology OCCT version V8 0 0 rc5 Description Multiple issues exist in the IGES and STEP file parsers that can be triggered by crafted files. These include an out-of-bounds read reading data outside the intended boundary of a...

Cisco Adaptive Security Appliance (ASA) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected...

Cisco Firepower Threat Defense (FTD) Software ESP Packet Processing DoS (cisco-sa-asaftd-esp-dos-uv7yD8P5)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Applian...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions...

CVE-2026-35547

creationtimestamp| type| source ---|---|--- 2026-04-30 10:36:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493215032264175 2026-04-30 18:07:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq7eyojud2g 2026-05-04 06:44:59+00:00| seen|...

CVE-2026-39457

creationtimestamp| type| source ---|---|--- 2026-04-30 10:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493161945002037 2026-04-30 13:12:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkpowf5zx72k 2026-04-30 18:07:35+00:00| seen|...

cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification ECDSA and...

CVE-2026-26204

creationtimestamp| type| source ---|---|--- 2026-04-30 06:01:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116492132169709434...

CVE-2026-28221

creationtimestamp| type| source ---|---|--- 2026-04-30 04:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116491683861953186...

CVE-2026-36837

creationtimestamp| type| source ---|---|--- 2026-04-30 04:05:18+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116491675981426045 2026-04-30 21:58:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmbwcjls2c...

SUSE CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

[SECURITY] Fedora 42 Update: asterisk-18.26.4-1.fc42

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

[SECURITY] Fedora 43 Update: asterisk-18.26.4-1.fc43

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...