11803 matches found
CVE-2026-56684
creationtimestamp| type| source ---|---|--- 2026-08-18 14:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hymfdqmzkz53z...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
CVE-2026-75839
ArcadeDB versions ≤ 26.7.3 expose an IDOR in the Raft cluster-info endpoints (GetClusterHandler, PostBootstrapStateHandler): authenticated users lacking cross-database privileges can enumerate the server's full database registry and retrieve per-database metadata (names, transaction IDs, bootstra...
389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
EUVD-2026-60494
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-77291
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...
CVE-2026-52480
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...
CVE-2026-11817 CVE-2026-11817 CVE Record
This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user who is an Org Admin of a single organization can call GET...
MINI-RG7M-GQ48-VV2H
Bulletin has no description...
CVE-2026-33437
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-72049
A flaw was found in the Linux kernel's IEEE 802.15.4 LLSEC subsystem. A local user without special privileges could exploit ungated legacy dump operations to read raw 16-byte AES-128 keys from the kernel keytable on wireless personal area network WPAN devices. This information disclosure...
EUVD-2026-60320
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437
In Stirling-PDF before 2.0.0, the Get Info workflow inserts untrusted PDF Title/Author metadata into the DOM via innerHTML in get-info-on-pdf.html, enabling stored XSS when a user clicks Get Info; the flaw is fixed in version 2.0.0. No exploitation evidence is provided in the documents.
GHSA-92HR-GMR6-H8CP Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling
Fix: PR 7906 ether/etherpad. A set of medium/low hardening fixes: - Weak RNG for tokens CWE-330: author/session/readonly IDs were generated with Math.random client and server. Now use crypto.getRandomValues. - Login timing / no failure delay CWE-208/CWE-307: the OIDC interaction login used a...
CVE-2026-68472
A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted EHT Multi-Link Element MLE in an MBSSID beacon. This could cause the kernel to read beyond the intended memory boundary when processing the...
MINI-6XR4-69JF-J5CX
Bulletin has no description...
MINI-3743-F47X-8Q7H
Bulletin has no description...