CVE-2026-24316

SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery SSRF. Successful exploitation could lead to interaction with...

CVE-2026-30960 RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface

rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT Just-In-Time compilation engine, which is fully exposed via the CFFI Foreign Functi...

CVE-2026-30960 RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface

rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT Just-In-Time compilation engine, which is fully exposed via the CFFI Foreign Functi...

CVE-2026-26148

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

CVE-2026-24287

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-3288

creationtimestamp| type| source ---|---|--- 2026-03-10 14:35:26+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/kubernetes-security-advisory-av26-208 2026-03-10 16:00:36+00:00| seen| https://gist.github.com/ichintu/18b9a09140a4dbb6aab50fdd24d38fb4 2026-03-17 15:07:42+00:00| seen|...

Windows Kernel Elevation of Privilege Vulnerability

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: runc, crossplane-provider-aws-elasticache, memcached-exporter, kyverno, kapp-controller, kubernetes-dns-node-cache, dask-gateway, kubernetes-csi-driver-hostpath, sftpgo-plugin-kms, crossplane-provider-aws-memorydb, gatekeeper, cluster-api-azure-controller, cadvisor,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: runc, crossplane-provider-aws-elasticache, minify, spark-operator, sftpgo-plugin-kms, gatekeeper, kubeflow, rabbitmq-messaging-topology-operator, kube-vip-cloud-provider, src-fingerprint, gitlab-pages, pdfcpu, terraform-provider-grafana, terraform-provider-tls,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: runc, crossplane-provider-aws-elasticache, minify, spark-operator, sftpgo-plugin-kms, gatekeeper, kubeflow, rabbitmq-messaging-topology-operator, kube-vip-cloud-provider, src-fingerprint, gitlab-pages, pdfcpu, terraform-provider-grafana, terraform-provider-tls,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim-fips, hydra-fips, zitadel, emqx-exporter-fips, cloud-provider-azure-fips, cue-fips, crossplane-provider-aws-dynamodb, gitlab-operator, pulumi-language-dotnet, crossplane-function-auto-ready, gitlab-operator-fips, crossplane-provider-aws-sns-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, yunikorn-k8shim-fips, wgcf, hydra-fips, kafkaexporter, zitadel, longhorn-cli, aws-application-networking-k8s, emqx-exporter-fips, cloud-provider-azure-fips, cue-fips, crossplane-provider-aws-dynamodb, gitlab-operator,...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

DEBIAN-CVE-2026-31802

node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar npm can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software...

RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface

Impact Vulnerability Type: Improper Control of Generation of Code 'Code Injection' CWE-94 / Improper Check for Unusual or Exceptional Conditions CWE-754 / Improper Input Validation CWE-20 / Use of Low-Level Functionality CWE-695 / Improper Privilege Management CWE-269 / External Control of System...

Malicious code in xc-input-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bd6a138ac384a0c310614cf8a679db9c7c02f9b4b44fbfb98910514eb2e80e The package xc-input-toggle was found to contain malicious code. Source: ghsa-malware aa8d4ebd389bd00b1f92bc14e6d9e1a2ffc83e2ef239991e0e01c0bb445166c...

SUSE CVE-2026-28348

lxmlhtmlclean is a project for HTML cleaning functionalities copied from lxml.html.clean. Prior to version 0.4.4, the hassneakyjavascript method strips backslashes before checking for dangerous CSS keywords. This causes CSS Unicode escape sequences to bypass the @import and expression filters,...

CVE-2026-24316 Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP

SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery SSRF. Successful exploitation could lead to interaction with...

CVE-2026-24316 Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP

SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery SSRF. Successful exploitation could lead to interaction with...