72222 matches found
CVE-2026-17736 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17874 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17820 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17719 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17714 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17980 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17656 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-68746
Not Failing Securely 'Failing Open' vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the...
CVE-2026-12872
creationtimestamp| type| source ---|---|--- 2026-08-05 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedouqy5w2a...
rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote
Summary When writing an object with metadata, the local backend applies the source-supplied mode, uid, and gid verbatim: it parses mode as an octal integer and passes it straight into os.Chmodo.path, os.FileModeumode, and passes uid/gid straight into os.Chown. The value is never masked to...
CVE-2026-68746 Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
Not Failing Securely 'Failing Open' vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the...
CVE-2026-70616
CVE-2026-70616 affects boringproxy 0.10.0. The vulnerability allows an authenticated user to cause resource exhaustion on the server by sending requests to GET /loading with attacker-supplied id values. The handler performs no map-lookup validation and blocks on a nil channel, with no timeout, ca...
GHSA-F2R8-JV7C-XQMP
creationtimestamp| type| source ---|---|--- 2026-08-05 19:31:21+00:00| seen| https://gist.github.com/alon710/186d223acc1b5d890a485795705464f7...
CVE-2026-70447
creationtimestamp| type| source ---|---|--- 2026-08-05 18:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dwirplyq3m6dz...
CVE-2026-71192
creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...
CVE-2026-20310
creationtimestamp| type| source ---|---|--- 2026-08-05 17:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26wvyiq2o 2026-08-05 18:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czdl4fbd4szpo 2026-08-06 08:01:07+00:00| seen|...
GHSA-V3J7-R9GQ-3GJW
creationtimestamp| type| source ---|---|--- 2026-08-05 16:31:30+00:00| seen| https://gist.github.com/alon710/833f29b9d380bcf059ea629581974a6e...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...