23900 matches found
CVE-2026-60185
...
CVE-2026-60180
...
CVE-2026-47058
...
CVE-2026-47056
...
CVE-2026-47052
...
CVE-2026-47035
The CVE-2026-47035 entry concerns Oracle Java SE (JavaFX) with an affected version of 8u491. The vulnerability affects JavaFX in Oracle Java SE and can be exploited by an unauthenticated attacker with network access, requiring user interaction. The impact is described as possible unauthorized upd...
CVE-2026-47007
...
CVE-2026-46999
CVE-2026-46999 affects Oracle Enterprise Manager Base Platform (Discovery Framework) on versions 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, with potential for unauthorized create/delete/modify access to data, unauthorized read access t...
CVE-2026-46986
...
CVE-2026-46968
This CVE concerns Oracle Java SE JSSE with affected versions listed (Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18). The vulnerability is exploitable over a network via TLS and ...
CVE-2026-46943
...
CVE-2026-35290
...
Malicious code in is-number-object (PyPI)
Source: kam193 60c891b7eb9d0f5a8ca04cb59f7b91bac36fbcc7df40fcf44b9a46f8c969daf3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
CVE-2026-47410 praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal "dev-secret-change-me" when PLATFORMJWTSECRET is unset. A safety check exists but only...
CVE-2026-16402
creationtimestamp| type| source ---|---|--- 2026-07-21 13:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xnw5tvw23 2026-07-22 04:47:38+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 18:42:04+00:00| seen|...
UBUNTU-CVE-2026-16352
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
SUSE CVE-2026-63925
In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsecpostdecrypt, when pn is U32MAX, pn + 1 overflows u32 to 0 and the first branch never fires. If nextpnhalves.lower is also in the upper half, pnsamehalfpn, lower is true...
SUSE CVE-2026-63950
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...
SUSE CVE-2026-64024
In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...