17606 matches found
CVE-2022-33229
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2020-3686
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
EUVD-2026-3246
HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hbsrc.tar.gz in the source tarball, which is affected by CVE-2026-22693...
CVE-2026-1162
creationtimestamp| type| source ---|---|--- 2026-01-18 21:00:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115918111077763770 2026-01-19 17:25:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcs5xitfz22m 2026-01-19 17:56:35+00:00| seen|...
CVE-2026-1158
creationtimestamp| type| source ---|---|--- 2026-01-18 20:46:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115918055933218922 2026-01-19 15:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrwseoexj22 2026-01-19 18:11:36+00:00| seen|...
CVE-2026-1140
creationtimestamp| type| source ---|---|--- 2026-01-18 07:38:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115914957462260239 2026-01-19 06:51:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcr2jgwnfz2w 2026-01-19 07:58:27+00:00| seen|...
EUVD-2026-3184
A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used...
EUVD-2026-3190
A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...
EUVD-2026-2943
In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values...
EUVD-2026-2939
The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...
CVE-2025-59960
creationtimestamp| type| source ---|---|--- 2026-01-16 08:11:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115903762602820506...
EUVD-2026-2958
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possibl...
EUVD-2026-2983
Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...
EUVD-2026-2986
Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files...
EUVD-2026-2993
The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the model application server...
EUVD-2026-2883
In MIT Kerberos 5 aka krb5 before 1.22 with incremental propagation, there is an integer overflow for a large update size to resize in kdblog.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash...
EUVD-2026-2904
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
GHSA-MP2G-9VG9-F4CG
creationtimestamp| type| source ---|---|--- 2026-01-15 20:32:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115901016724244972 2026-01-24 21:24:17+00:00| seen| https://gist.github.com/alon710/ab0d3c34073998d3a71df8d3394d5e97 2026-01-24 22:29:56+00:00| seen|...