CVE-2026-10270 D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpddebug.asp of the component API. The manipulation of the argument Time results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in follow-redirects-1.15.11.tgz

Summary IBM Watson Discovery Cartridge affected by vulnerability in follow-redirects-1.15.11.tgz Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0,...

rattler has an entry-point path traversal in noarch:python install (arbitrary file write)

Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...

CVE-2026-10249

creationtimestamp| type| source ---|---|--- 2026-06-01 13:25:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna6kqr6zb2p...

CVE-2026-9024

creationtimestamp| type| source ---|---|--- 2026-06-01 12:29:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna3fqd2dx2p...

Advisory ROSA-SA-2026-3308

CVE-ID: CVE-2020-24332 BDU-ID: None CVE-Crit: HIGH CVE-DESCRIPTION: The vulnerability in the tcsd daemon of the TrouSerS package relates to the possibility of attacks through symbolic links when creating the system.data file. It allows a local malicious actor tss user to create or damage arbitrar...

CVE-2026-10232

creationtimestamp| type| source ---|---|--- 2026-06-01 11:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7wimfomp2j...

CVE-2026-10230

creationtimestamp| type| source ---|---|--- 2026-06-01 10:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7w7nwhvk2t...

CVE-2026-49328

creationtimestamp| type| source ---|---|--- 2026-06-01 10:38:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn7v7ljf472r 2026-06-01 12:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna4w4of7r2j...

Improper Input Validation

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Improper Input Validation through the addNetworkConnector function exposed via the Jolokia JMX-HTTP bridge. An attacker can achieve arbitrary code...

EUVD-2026-33622

Server-Side Request Forgery SSRF in the UrlImageConverter component of Apache Fesod Incubating fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to...

Link following vulnerability in Canon My Image Garden for macOS and CUPS Printer Driver for macOS

Overview My Image Garden for MacOS and CUPS Printer Driver for macOS provided by Canon Inc. contain the following vulnerability. Improper link resolution before file access 'Link following' CWE-59 - CVE-2026-6891, CVE-2026-6892 Canon Inc. reported this vulnerability to JPCERT/CC to notify users o...

CVE-2026-10227

creationtimestamp| type| source ---|---|--- 2026-06-01 07:47:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7lolmwz42n...

CVE-2026-20455

creationtimestamp| type| source ---|---|--- 2026-06-01 06:58:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7iwm26vl2b 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260602 2026-06-02 20:00:00+00:00| seen|...

CVE-2026-20452

creationtimestamp| type| source ---|---|--- 2026-06-01 06:49:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7ign2zc62v 2026-06-03 06:13:35+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9 2026-06-06 08:00:05+00:00| seen|...

CVE-2026-10210

creationtimestamp| type| source ---|---|--- 2026-06-01 03:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn76kylaag2b...

CVE-2026-10209

creationtimestamp| type| source ---|---|--- 2026-06-01 03:38:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn75pznqef2j...

CVE-2018-25254

creationtimestamp| type| source ---|---|--- 2026-06-01 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn75od26p52e...

CVE-2026-10208

creationtimestamp| type| source ---|---|--- 2026-06-01 03:24:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn74ylch4u24...

CVE-2026-10206

A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...