75688 matches found
SUSE CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
vulnerabilities present in Microsoft Office
Microsoft has uncovered vulnerabilities in various Office products, such as Word, Excel, PowerPoint, and SharePoint. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. For successful exploitation, the...
EUVD-2026-46186
URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 through 11052026...
GHSA-F4GW-2P7V-4548
creationtimestamp| type| source ---|---|--- 2026-07-21 12:01:41+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6mivxy24 2026-08-12 12:01:31+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gkmrec2t...
CVE-2026-54370
creationtimestamp| type| source ---|---|--- 2026-07-21 12:01:17+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5uytuq2r 2026-07-30 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrufedkcaz2i...
XSS in ammonia via SVG `animate` and `set` animation tags
The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. xml Click set Ammonia did not apply attribute filters based on attributeName, so the contents of the to, from, and values tags were not sanitized as URLs. Applications that do not...
atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...
CVE-2026-15370
creationtimestamp| type| source ---|---|--- 2026-07-21 10:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lqxtnyr2i...
CVE-2026-13694
creationtimestamp| type| source ---|---|--- 2026-07-21 09:57:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kag5gbv2e...
CVE-2026-15305
creationtimestamp| type| source ---|---|--- 2026-07-21 08:55:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5grm6cjl2z 2026-08-18 12:15:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mte6z4psi72h...
GHSA-PG7V-JWJ7-P798
creationtimestamp| type| source ---|---|--- 2026-07-21 08:31:39+00:00| seen| https://gist.github.com/alon710/afd430e951c08264a9a3f3da451132a3...
BIT-ARGO-CD-2026-45738 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argoproj.io/ annotations whose pipe-separated values are rendered by...
GHSA-VJC4-5QP5-M44J
creationtimestamp| type| source ---|---|--- 2026-07-21 07:31:35+00:00| seen| https://gist.github.com/alon710/796ee0a4078a7a835fdac3bedcdff5ad...
CVE-2026-6952
creationtimestamp| type| source ---|---|--- 2026-07-21 06:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr567bvu472a...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
DEBIAN-CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-63729
creationtimestamp| type| source ---|---|--- 2026-07-21 06:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr55nepsvl2q...
CVE-2023-37507
creationtimestamp| type| source ---|---|--- 2026-07-21 05:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54h3evhj27...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...