16047 matches found
PT-2026-55326
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.10.2 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2 Description A null pointer dereference occurs when the software attempts t...
PT-2026-55320
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Incorrect authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...
KLA91131 PE vulnerability in Microsoft Server Software
Privilege escalation vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-54998 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Exchange-Online CVE list...
PT-2026-55314
Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description An invalidly formatted IKEv2 fragment can cause the pluto daemon to crash and restart, leading to a denial of service. The issue occurs within the reassemble v2 incoming fragments function,...
TencentOS Server 3: openssh (TSSA-2026:0261)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0261 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2026-14149
creationtimestamp| type| source ---|---|--- 2026-07-01 23:08:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116847233351358654 2026-07-02 08:22:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 19:40:30+00:00| seen|...
CVE-2026-14040
creationtimestamp| type| source ---|---|--- 2026-07-01 21:26:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhg7vyuq2r 2026-07-01 23:21:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116847286375190062 2026-07-02 07:50:17+00:00| seen|...
UBUNTU-CVE-2026-54908
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...
CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...
CVE-2026-54908
CVE-2026-54908 affects the Pion DTLS Go implementation. Versions prior to 3.1.4 are vulnerable to a remote Denial of Service caused by a panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. The issue has been fixed in 3.1.4. No exploitation details are provided in the documents.
CVE-2026-54908
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...
CVE-2026-13835
creationtimestamp| type| source ---|---|--- 2026-07-01 06:02:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843200825115865 2026-07-02 07:20:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:16:12+00:00| seen|...
CVE-2026-13844
creationtimestamp| type| source ---|---|--- 2026-07-01 05:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843147892992564 2026-07-02 01:09:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtui7ukz22 2026-07-02 07:20:44+00:00| seen|...
CVE-2026-13821
creationtimestamp| type| source ---|---|--- 2026-07-01 05:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843094682918653 2026-07-01 19:39:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbgibvhs2y 2026-07-02 01:05:22+00:00| seen|...
CVE-2026-13805
creationtimestamp| type| source ---|---|--- 2026-07-01 05:22:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843042073075587 2026-07-02 07:19:14+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:29:12+00:00| seen|...
CVE-2026-13787
creationtimestamp| type| source ---|---|--- 2026-07-01 04:55:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842935926725213 2026-07-02 01:07:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtrazirz22 2026-07-02 07:18:36+00:00| seen|...
BIT-ENVOY-2026-48090 Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)
Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter envoy.filters.http.oauth2 can leave an in-flight async token exchange attached to a downstream stream that has already been torn down. A late...
CVE-2026-24270
creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-01 15:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpluoza7dy2v 2026-07-02 02:50:50+00:00| seen|...
CVE-2025-23351
creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-01 17:03:35+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mplypz6an627 2026-07-02 01:57:01+00:00| seen|...