11796 matches found
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
MINI-8V3M-X55V-2RJ9
Bulletin has no description...
MINI-F49P-F5QH-FH78
Bulletin has no description...
MINI-798J-VM49-PVP5
Bulletin has no description...
Microsoft Visual Studio Products (August 2026)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-62871 - Unchecked input for loop condition in .NET allows an unauthorized...
MAL-2026-14138 Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b7bcd65cbf07a90130de5e4a29fb72bc99badb287a1e1dc7373c288a1ae0be package.json declares preinstall: node index.js, causing index.js to run automatically on npm install. The script collects host identifiers...
CVE-2026-73921
creationtimestamp| type| source ---|---|--- 2026-08-18 22:28:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbby4xnp2c 2026-08-19 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgihppt7l2u 2026-08-19 11:01:13+00:00| seen|...
CVE-2026-62544
creationtimestamp| type| source ---|---|--- 2026-08-18 22:15:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfakgn7oe2u 2026-08-19 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4h5k2r2t 2026-08-19 17:48:30+00:00| seen|...
CVE-2026-70796
...
CVE-2026-62500
The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...
CVE-2026-74979
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37ecf7h2j 2026-08-19 04:46:51+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-21 15:07:06+00:00| see...
CVE-2026-74956
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37cwmsx2j 2026-08-19 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 05:07:07+00:00| see...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
CVE-2026-56684
creationtimestamp| type| source ---|---|--- 2026-08-18 14:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hymfdqmzkz53z...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
CVE-2026-75839
ArcadeDB versions ≤ 26.7.3 expose an IDOR in the Raft cluster-info endpoints (GetClusterHandler, PostBootstrapStateHandler): authenticated users lacking cross-database privileges can enumerate the server's full database registry and retrieve per-database metadata (names, transaction IDs, bootstra...
389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
EUVD-2026-60494
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network...
