Lucene search
+L

256829 matches found

OSV
OSV
added 2026/09/07 12:00 a.m.6 views

OPENSUSE-SU-2026:11696-1 curl-8.22.0-1.1 on GA media

These are all security issues fixed in the curl-8.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS5.8AI score0.01162EPSS
SaveExploits7References7
OSV
OSV
added 2026/09/07 12:00 a.m.7 views

OPENSUSE-SU-2026:11702-1 jsoup-1.23.2-1.1 on GA media

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS5.7AI score0.00525EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/07 12:00 a.m.7 views

OPENSUSE-SU-2026:11712-1 python313-jwcrypto-1.6.0-1.1 on GA media

These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

6.8CVSS6.2AI score0.0098EPSS
SaveExploits1References3
Redos
Redos
added 2026/09/07 12:00 a.m.7 views

ROS-20260907-73-0501

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.2AI score0.00396EPSS
SaveExploits0
OSV
OSV
added 2026/09/07 12:00 a.m.4 views

MAL-2026-16008 Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.7AI score
SaveExploits0References3
OSV
OSV
added 2026/09/07 12:00 a.m.3 views

OPENSUSE-SU-2026:11705-1 kimi-code-0.41.0-1.1 on GA media

These are all security issues fixed in the kimi-code-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.5AI score0.00812EPSS
SaveExploits2References2
OSV
OSV
added 2026/09/07 12:00 a.m.4 views

UBUNTU-CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/09/07 12:00 a.m.3 views

OPENSUSE-SU-2026:11699-1 google-guest-agent-20260903.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS5.8AI score0.00685EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-86429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The league/commonmark thephpleague/commonmark library in versions = 1.5.0 and 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/07 12:00 a.m.8 views

OPENSUSE-SU-2026:11706-1 bson-devel-2.5.2-1.1 on GA media

These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

8.2CVSS5.7AI score0.00186EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/07 12:00 a.m.5 views

OPENSUSE-SU-2026:11713-1 trivy-0.74.0-4.1 on GA media

These are all security issues fixed in the trivy-0.74.0-4.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS5.8AI score0.00685EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/07 12:00 a.m.10 views

OPENSUSE-SU-2026:11707-1 libopenslide-devel-4.0.1-1.1 on GA media

These are all security issues fixed in the libopenslide-devel-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

7.7CVSS5.7AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/07 12:00 a.m.6 views

OPENSUSE-SU-2026:11697-1 distribution-registry-3.1.1-6.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS5.8AI score0.00685EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/06 11:17 p.m.6 views

UBUNTU-CVE-2026-86227

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

3.1CVSS5.3AI score0.00321EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/06 10:45 p.m.6 views

CVE-2026-86231 mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation

A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument knownhosts results in improper check for certificate revocation. The attack is possible to ...

6.3CVSS4.4AI score
SaveExploits0References11
OSV
OSV
added 2026/09/06 8:35 p.m.17 views

MAL-2026-15942 Malicious code in omni-channel-order-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5286224ab4427b1e85bbdfd5e57b9d96fc9736504d17f2f31839562f19b88ee The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal omni-channel-order-frontend package...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/09/06 8:25 p.m.7 views

MAL-2026-15941 Malicious code in ocfe-tv-subscription-center-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1dcb639402e9d94a5f6f171e32ed97eb7064f7a557b1f7382bf832a4415ba Package name resembles an internal-scoped name and uses an implausibly high version 9999.0.0 consistent with dependency-confusion targeting. The...

5.7AI score
SaveExploits0References2
OSV
OSV
added 2026/09/06 6:17 p.m.13 views

DEBIAN-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

9.8CVSS5.7AI score0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/06 6:17 p.m.9 views

DEBIAN-CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

7.5CVSS5.8AI score0.00425EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/06 6:17 p.m.5 views

DEBIAN-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

8.2CVSS5.9AI score0.0054EPSS
SaveExploits1References1
Rows per page
Query Builder