2569 matches found
UBUNTU-CVE-2026-44918
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...
CVE-2026-11827
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...
ROOT-OS-DEBIAN-12-CVE-2026-5773 CVE-2026-5773 in rootio-curl - Patched by Root
Root has patched CVE-2026-5773 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...
DEBIAN-CVE-2026-58252
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive messages on denied subjects when a wildcard subscription overlapped with a configured wildcard deny rule but was not a subset...
UBUNTU-CVE-2026-58253
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when noauthuser was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an...
DEBIAN-CVE-2026-56000
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent pointing into potentially reallocated memory...
DEBIAN-CVE-2026-53588
Bulletin has no description...
DEBIAN-CVE-2026-45092
Bulletin has no description...
DEBIAN-CVE-2026-45093
Bulletin has no description...
CVE-2026-53131
creationtimestamp| type| source ---|---|--- 2026-07-06 06:48:59+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...
SUSE CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...
CVE-2026-14648
creationtimestamp| type| source ---|---|--- 2026-07-05 00:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpubwlkocb2t...
BELL-CVE-2026-53332
Bulletin has no description...
CVE-2026-14607
creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprl2pm32s2z...
CVE-2026-40914 vulnerabilities
Vulnerabilities for packages: wildfly...
DEBIAN-CVE-2026-8286
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...
CVE-2026-54408
creationtimestamp| type| source ---|---|--- 2026-07-03 07:05:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy7nokut2p 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-13 03:37:06+00:00| seen|...
CVE-2026-11352
An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can...
