75571 matches found
CVE-2026-61981: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
CVE-2026-48013: Server-Side Request Forgery (SSRF)
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the /api/action/media/external-link endpoint allows authenticated admin users to make server-side HTTP HEAD requests to arbitrary internal IP addresses. While the parallel uploadFromURL flow validates target IPs against...
Linux kernel Network Adapter Driver Module Heap Buffer Overflow DoS
The vulnerability of the netsecregistermdio function in the drivers/net/ethernet/socionext/netsec.c file of the Linux network adapter driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a system failure...
EDAC Driver Heap Buffer Overflow DoS
The vulnerability of the pcigetdevwrapper function in the drivers/edac/i10nmbase.c file of the EDAC driver for the Linux operating system is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux HSI ssi_probe Heap Buffer Overflow DoS
The vulnerability of the ssiprobe function in the drivers/hsi/controllers/omapssicore.c file of the Linux high-speed synchronous serial interface driver core is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the File...
PT-2026-63972
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description A cross-site scripting issue exists in the siyuan:// protocol handler. When a link using the format siyuan://plugins/ references a plugin that is not installed, the application opens a custom tab and...
Oracle Linux 10 : kernel (ELSA-2026-42919)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42919 advisory. - fanotify: fix false positive on permission events CKI Backport Bot RHEL-180076 CVE-2026-46150 - ice: fix double-free of txbuf skb Jakub Ramaseuski...
PT-2026-71919
Name of the Vulnerable Software and Affected Versions @auth/core versions prior to 0.41.3 next-auth versions prior to 4.24.15 next-auth versions prior to 5.0.0-beta.32 Description The defaultNormalizer used in the email and magic-link sign-in flow validates an email address before applying Unicod...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ethtoolgetlinkksettings function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the am33xxpmprobe function in the drivers/soc/ti/pm33xx.c file of the Linux operating system’s kernel module is related to errors during link generation. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ocxlfileregisterafu function in the drivers/misc/ocxl/file.c file of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-60372
creationtimestamp| type| source ---|---|--- 2026-07-22 23:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbiodo4x62j 2026-07-23 00:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjunxony2e 2026-07-23 01:20:25+00:00| seen|...
CVE-2026-60369
creationtimestamp| type| source ---|---|--- 2026-07-22 23:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbiksnd2z2i 2026-07-23 00:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjsv4isa2e 2026-07-23 01:10:24+00:00| seen|...
foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-73415 via jupyterlab (3.2.9)
jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC...
foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-73626 via jupyterlab (3.2.9)
jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G7...
CVE-2026-16629
creationtimestamp| type| source ---|---|--- 2026-07-22 23:04:25+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrbgolijbe2c...
CVE-2026-64796
creationtimestamp| type| source ---|---|--- 2026-07-22 22:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfmmtla32x...