CVE-2026-36537

ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied identity data within the user parameter of the /login/oauth2/code/ endpoint. By manipulating the email address in this JSON object, a remote...

CVE-2026-6039

CVE-2026-6039 affects LibreOffice DXF import: a heap buffer overflow occurs when importing a DXF polyline with a point count that exceeds 16-bit during buffer sizing, while the full count is used to fill the buffer. This mismatch allows writing past the end of the buffer. In fixed versions, such ...

EUVD-2026-36734

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

CVE-2026-6039 Heap buffer overflow in DXF polyline import

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

CVE-2026-6039

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

CVE-2026-44188

creationtimestamp| type| source ---|---|--- 2026-06-15 12:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116754011086378828 2026-06-15 12:22:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modbk7rkkt23...

CVE-2026-12218

creationtimestamp| type| source ---|---|--- 2026-06-15 07:01:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116752835857280454 2026-06-15 07:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocsjjd7el2p 2026-06-15 07:59:57+00:00| seen|...

CVE-2026-12214

creationtimestamp| type| source ---|---|--- 2026-06-15 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocitrj45z2v 2026-06-15 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mocm7jz4ix2a 2026-06-15 06:00:33+00:00| seen|...

CVE-2026-5482

creationtimestamp| type| source ---|---|--- 2026-06-15 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-5482 2026-06-15 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116754364893455307 2026-06-15 13:30:28+00:00| seen|...

CVE-2026-12193

creationtimestamp| type| source ---|---|--- 2026-06-15 00:00:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moby42wvt52y 2026-06-15 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116751180370821217 2026-06-15 01:00:26+00:00| seen|...

CVE-2026-36537

ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied identity data within the user parameter of the /login/oauth2/code/ endpoint. By manipulating the email address in this JSON object, a remote...

CVE-2026-12222

creationtimestamp| type| source ---|---|--- 2026-06-14 14:23:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116748909958194636 2026-06-15 07:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpktp47b26 2026-06-15 07:30:32+00:00| seen|...

CVE-2026-12221

creationtimestamp| type| source ---|---|--- 2026-06-14 14:09:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116748855026545149 2026-06-15 07:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpkmlj2e2o 2026-06-15 08:04:48+00:00| seen|...

CVE-2026-12191

creationtimestamp| type| source ---|---|--- 2026-06-14 06:57:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116747156308574401 2026-06-15 00:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moby3piree2c 2026-06-15 00:08:15+00:00| seen|...

CVE-2026-12174

creationtimestamp| type| source ---|---|--- 2026-06-13 05:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116741210849212111 2026-06-13 23:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo7faoanvg2o 2026-06-14 03:00:25+00:00| seen|...

CVE-2026-41157

creationtimestamp| type| source ---|---|--- 2026-06-13 04:50:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116740994646655770...

CVE-2026-46054

creationtimestamp| type| source ---|---|--- 2026-06-12 19:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116738725787227262 2026-07-02 06:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:17:49+00:00|...

Security Updates for Microsoft Exchange Server (June 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the June, 2026 security bulletin. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...

Linux Distros Unpatched Vulnerability : CVE-2026-9749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving...

GHSA-4R3C-5HPG-58QR Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds

SSH message fields were decoded through allocation-first parsers before field-specific bounds Summary Several russh client and server message handlers decoded attacker-controlled SSH strings, name-lists, and byte fields into owned allocations before applying field-specific bounds. A remote SSH pe...