23309 matches found
SUSE-SU-2026:21828-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues - Update to Firefox Extended Support Release 140.11.0 ESR MFSA 2026-48 bsc1265212. MFSA 2026-48: - CVE-2026-8388: Incorrect boundary conditions in the JavaScript Engine: JIT component. - CVE-2026-8391: Other issue in the JavaScript Engine...
CVE-2026-9277
creationtimestamp| type| source ---|---|--- 2026-05-22 13:22:55+00:00| published-proof-of-concept| https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p 2026-05-22 17:34:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhhsrhmds2o 2026-05-23 05:06:18+00:00...
CVE-2026-4646
creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgyrlntzy2n...
CVE-2026-31499
creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-07-02 07:15:50+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...
MAL-2026-4563 Malicious code in finkrouter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cee0798d304ff9f0532df845511df6560314b8808664c15b3c3aa18f1953b5 The package's CLI shipped as cli.obf.js, the javascript-obfuscator output with RC4 string-array encoding and control-flow flattening per package.json...
CVE-2026-6864
creationtimestamp| type| source ---|---|--- 2026-05-22 07:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgf3hprox2k 2026-05-25 05:49:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnrs6gp4q2l...
CVE-2026-4834
creationtimestamp| type| source ---|---|--- 2026-05-22 06:30:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgcpz2pni2r...
CVE-2026-39835
creationtimestamp| type| source ---|---|--- 2026-05-22 06:21:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgc7xj2rw2e 2026-06-01 15:38:41+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnafjazque2y 2026-06-26 08:42:13+00:00| seen|...
CVE-2026-25607
creationtimestamp| type| source ---|---|--- 2026-05-22 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-25606 2026-05-22 12:56:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgybe5ykk2p...
CVE-2026-9112
creationtimestamp| type| source ---|---|--- 2026-05-22 03:08:20+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmfxdiiuzn2h 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...
GHSA-WMW3-3FV3-H54W Concrete CMS has a session-hardening bypass and allows password change without reauthorization
Concrete CMS 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass. The user-profile edit controller passes the entire raw POST array to UserInfo::update without field whitelisting resulting in password change without requiring the current password ...
Devolutions Server 安全漏洞
Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. Versions of Devolutions Server from 2026.1.6.0 to 2026.1.16.0, as well as versions prior to 2025.3.20.0, have security...
PT-2026-42790
Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory user to modify their own profile attributes via a crafted API request. This issue affects : Devolutions Server 2026.1.6.0 through 2026.1.16.0 Devolutions Server 2025.3.20.0 and...
CVE-2026-8435
creationtimestamp| type| source ---|---|--- 2026-05-21 22:33:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmfhzo4mbk2e...
CVE-2026-47114
creationtimestamp| type| source ---|---|--- 2026-05-21 21:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmfculcztd2l 2026-06-05 11:01:43+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyezeuae22...
CVE-2026-46473
creationtimestamp| type| source ---|---|--- 2026-05-21 19:56:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmf75oycuh2u 2026-05-21 21:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmfcut5yt22c 2026-05-22 00:00:39+00:00| seen|...
CVE-2026-9114
creationtimestamp| type| source ---|---|--- 2026-05-21 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmf66sc66s2v 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...
CVE-2026-48239
creationtimestamp| type| source ---|---|--- 2026-05-21 19:12:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4tno6jl2h...