72354 matches found
CVE-2026-45363
creationtimestamp| type| source ---|---|--- 2026-07-14 22:16:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqnaaypv4m2v 2026-07-15 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqng3v7m442f 2026-07-15 00:00:44+00:00| seen|...
UBUNTU-CVE-2026-46638
Twig is a template language for PHP. Prior to 3.26.0, % sandbox %% include % can include a template that was previously loaded outside the sandbox without re-invoking checkSecurity, allowing the cached template to use tags, filters, and functions that should have been denied by...
GHSA-MQXV-9RM6-W8QC
creationtimestamp| type| source ---|---|--- 2026-07-14 22:13:10+00:00| seen| https://gist.github.com/alon710/c304e0355d4b523094aabb49f860b83c...
CVE-2026-48356
creationtimestamp| type| source ---|---|--- 2026-07-14 22:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7zmfnfg2f 2026-07-15 10:18:08+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoilwqix325 2026-07-15 14:38:21+00:00| seen|...
CVE-2026-55011
creationtimestamp| type| source ---|---|--- 2026-07-14 22:02:10+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:42+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-16 12:45:58+00:00| seen|...
JLSEC-2026-698 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding...
Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...
JLSEC-2026-717
URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL woul...
JLSEC-2026-723 Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion
Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally due to incorrect size handling of the AuthorityKeyIdentifier extension...
JLSEC-2026-700 Out-of-bounds heap read during SM2/SM3 certificate signature verification
Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...
CVE-2026-48354 CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
GHSA-HGJX-R89M-M7V4
creationtimestamp| type| source ---|---|--- 2026-07-14 21:12:44+00:00| seen| https://gist.github.com/alon710/2ffb041b6fdd6557a249f765c7133d25...
CVE-2026-58617
creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqn2yvy7q72t 2026-07-14 22:02:40+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:02:12+00:00| seen|...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-59891
creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyusdtuq25 2026-07-22 16:43:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrarfiguws2h 2026-07-22 16:43:35+00:00| seen|...
CVE-2026-48348 Animate | Incorrect Authorization (CWE-863)
Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a maliciou...
CVE-2026-48069 @grpc/grps-js: An incoming malformed compressed message can cause a client or server crash
@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming compressed message can cause a client or server process that uses @grpc/grpc-js to crash. This issue is fixed in...
CVE-2026-50659 .NET Spoofing Vulnerability
...
CVE-2026-50528 .NET Security Feature Bypass Vulnerability
...