311642 matches found
CVE-2026-72195
A flaw was found in the Linux kernel's ntfs3 file system driver. An integer underflow vulnerability occurs in the UpdateResidentValue function when processing a maliciously crafted Log Record Header LRH. This underflow can lead to an incorrect calculation of datasize, allowing subsequent operatio...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
CVE-2026-75914 CodeWhale before 0.8.64 Path Traversal via image_analyze symlink
CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...
CVE-2026-75915 CodeWhale before 0.8.64 Environment Variable Leak via js_execution
CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the jsexecution tool that fails to scrub parent process environment variables before spawning Node.js. Attackers can craft malicious JavaScript code executed by the tool to read process.env and leak API key...
CVE-2026-62684 File Browser: Share API exposes the password hash and bypass token
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST...
CVE-2026-62684
File Browser prior to 2.63.17 exposes the bcrypt password_hash and the bypass token of password-protected shares in API responses. The root cause is that the Link storage struct is serialized directly via unfiltered json.Marshal in sharePostHandler, shareListHandler, and shareGetsHandler, so both...
CVE-2026-62684
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST...
CVE-2026-62684 File Browser: Share API exposes the password hash and bypass token
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST...
CVE-2026-50252
A flaw in Unbound's SOREUSEPORT implementation reduces UDP source port entropy by allowing attackers to map ports to specific worker threads. This enables DNS cache poisoning, potentially leading to traffic redirection or unauthorized information disclosure. Mitigation Disable the so-reuseport...
mysql: Performance Schema unspecified vulnerability (CPU Jul 2026)
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1...
CVE-2026-73426
creationtimestamp| type| source ---|---|--- 2026-08-18 15:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aegpfivy42rii...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...
GO-2026-6220 Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint in github.com/fleetdm/fleet
Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint in github.com/fleetdm/fleet...
CVE-2026-24301
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-75832
creationtimestamp| type| source ---|---|--- 2026-08-18 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteec6zzp323 2026-08-18 14:07:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefbrptnq2y...