27998 matches found
CVE-2026-64091 batman-adv: tt: fix TOCTOU race for reported vlans
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...
CVE-2026-64091 batman-adv: tt: fix TOCTOU race for reported vlans
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...
CVE-2026-63958 usb: typec: ucsi: validate connector number in ucsi_connector_change()
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsiconnectorchange The connector number in a UCSI CCI notification is a 7-bit field supplied by the PPM. ucsiconnectorchange uses it to index the ucsi-connector array without checki...
CVE-2026-16206
A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...
CVE-2026-16151
A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilter of the file src/filters.ts. Such manipulation of the argument column leads to improperly controlled modification of object prototype attributes. The attack can be executed remotely. The project...
PT-2026-60783
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from private repositories they did not have access to, including private repository owners and names, branch names, commit SHAs,...
CVE-2026-55949
creationtimestamp| type| source ---|---|--- 2026-07-14 19:00:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237 2026-07-14 22:03:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:00:52+00:00| seen|...
UBUNTU-CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...
EUVD-2026-42912
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data...
CVE-2026-59794
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data...
CVE-2026-59833
creationtimestamp| type| source ---|---|--- 2026-07-10 00:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqawawpeym27...
CVE-2026-60104
creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24 2026-07-08 23:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z 2026-07-09 16:00:46+00:00| seen|...
CVE-2026-13122
creationtimestamp| type| source ---|---|--- 2026-07-06 16:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyjztr2ey22 2026-07-09 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqagfnydfd2g...
CVE-2026-44937
creationtimestamp| type| source ---|---|--- 2026-07-06 12:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy3l5tpj42s 2026-07-18 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqw32m2cql2y 2026-07-18 10:37:07+00:00| seen|...
CVE-2026-14686
A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/DoubleHistogram.java of the component Range Check. Performing a manipulation results in incorrect comparison. The attack i...
CVE-2026-14535
Summary: CVE-2026-14535 affects Trail of Bits fickling up to version 0.1.11. A logic error in the UnsafeImportsML and MLAllowlist passes causes shared mutable state (AnalysisContext.reported_shortened_code) to poison deduplication, rendering MLAllowlist dead code and allowing certain pickle paylo...
CVE-2026-41120
creationtimestamp| type| source ---|---|--- 2026-06-25 15:37:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4r462wol2e 2026-06-26 10:37:19+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116815969097431434 2026-06-27 04:37:06+00:00| seen|...
CVE-2026-53120
creationtimestamp| type| source ---|---|--- 2026-06-24 18:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jgtpcv72o...
CVE-2026-49440 Deno: Miller-Rabin Primality Test Allows Zero Rounds
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrimecandidate, options, callback and crypto.checkPrimeSynccandidate, options ran no Miller-Rabin rounds at all when the caller left options.checks at its default of 0. In that mode, the only test applied ...