58236 matches found
MINI-JXF5-WFG7-365H
Bulletin has no description...
CVE-2026-10079
creationtimestamp| type| source ---|---|--- 2026-07-31 12:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrwvsfvk4p2x...
CVE-2026-64804
creationtimestamp| type| source ---|---|--- 2026-07-31 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwuhubrry2v...
CVE-2026-64806
creationtimestamp| type| source ---|---|--- 2026-07-31 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwpgwxanr2y...
CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...
CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
kernel: ipc: limit next_id allocation to the valid ID range
A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...
CVE-2026-18452
creationtimestamp| type| source ---|---|--- 2026-07-31 07:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwg4aowwe2k 2026-07-31 08:09:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6elztljrmbc4t...
GHSA-7683-3W9X-CH42
creationtimestamp| type| source ---|---|--- 2026-07-31 05:31:42+00:00| seen| https://gist.github.com/alon710/14986c8aa9f0de6cc9812b6e85b52624...
CVE-2026-55502
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...
CVE-2026-14540
creationtimestamp| type| source ---|---|--- 2026-07-31 03:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eimuhra2zjnpt 2026-07-31 12:48:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwygq2jw724 2026-08-01 04:58:43+00:00| seen|...
CVE-2026-55502
Cloudreve prior to version 4.17.0 contains an OAuth scope bypass in the admin storage policy route POST /api/v4/admin/policy/oauth/signin. The admin route is under RequiredScopes(Admin.Read) and does not apply the local Admin.Write guard used by sibling policy mutation routes, allowing an attacke...
CVE-2026-14541
An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...
GHSA-5P9G-J988-PCWV
creationtimestamp| type| source ---|---|--- 2026-07-31 02:31:09+00:00| seen| https://gist.github.com/alon710/eb7bbb63a594430d7d6ab18e1b915ebd...
CVE-2026-6890
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-MMJF-RQRV-855V vulnerabilities
Vulnerabilities for packages: promitor, dotnet-bootstrap...
