3458 matches found
CVE-2026-0481
creationtimestamp| type| source ---|---|--- 2026-05-15 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mluiq5544h22 2026-05-15 04:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116576710004603324...
CVE-2026-44380
creationtimestamp| type| source ---|---|--- 2026-05-14 00:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrjvangu42k...
CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
CVE-2026-31217
The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...
CVE-2026-44872
creationtimestamp| type| source ---|---|--- 2026-05-12 23:11:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlovxghm5q2o 2026-05-18 12:54:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116595677754011235...
CVE-2026-44217
sse-channel is an SSE-implementation which can be used to any node.js http request/response stream. Prior to 4.0.1, implementations that allow user-provided values to be passed to event, retry or id fields are susceptible to event spoofing, where an attacker could inject arbitrary messages into t...
CVE-2026-45159
creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a...
Improper Memory Buffer Handling
uuid is vulnerable to Improper Memory Buffer Handling. The vulnerability is due to missing validation of buffer size and offset values during UUID generation, which allows an attacker to trigger silent partial writes into caller-provided buffers...
SUSE CVE-2026-8276
A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysqlserver/mysqlserver.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can be launched remotely. The attack requires...
MINI-98PF-PXC8-6FXX
Bulletin has no description...
CVE-2026-8255
creationtimestamp| type| source ---|---|--- 2026-05-11 03:06:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkc5xzyid2k...
MINI-RVRM-PXMF-XCFW
Bulletin has no description...
security-code-reviewer
No d...
CVE-2026-43366
A flaw was found in the Linux kernel. A vulnerability exists in the iouring/kbuf component related to buffer recycling. There is a time gap where a buffer list, if empty, could be incorrectly upgraded to a ring-provided type. The legacy recycling mechanism fails to properly check the buffer list'...
CVE-2026-44211
creationtimestamp| type| source ---|---|--- 2026-05-08 16:20:54+00:00| published-proof-of-concept| https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2 2026-06-01 19:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnasmhfsmx26 2026-06-03 22:07:08+00:00| seen|...
CVE-2026-42499
creationtimestamp| type| source ---|---|--- 2026-05-07 22:12:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcady7in72q 2026-05-08 12:01:28+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoo422j726 2026-05-15 16:19:42+00:00| seen|...