4824 matches found
GHSA-846P-JG2W-W324 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, trivy-fips, slsa-verifier, ko, kyverno, witness, kyverno-notation-aws, cosign, neuvector-sigstore-interface, kyverno-notation-aws-fips, vexctl, kyverno-policy-reporter-plugins-kyverno-fips, tekton-chains, tkn, cloudbeat, crossplane-fips,...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004889)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004889 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix memory leak in hidrawrelease Free the buffered reports before deleting the list...
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 12, 2026 to January 18, 2026)
Did you know Wordfence runs aBug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...
RHSA-2026:0934
creationtimestamp| type| source ---|---|--- 2026-01-22 07:17:18+00:00| seen| Telegram/lGv1yy1cS3Qd5QcSfBz2heRy30BQbqauAGACazKYMQPWz0 2026-01-22 07:17:33+00:00| seen| Telegram/tBmM1hwypCv-VLMpuj8Kze67Wi8ihsn5KG2dbjWdD4A-1M 2026-01-22 07:17:54+00:00| seen|...
CVE-2026-23946 Tendenci has Authenticated Remote Code Execution via Pickle Deserialization
Tendenci is an open source content management system built for non-profits, associations and cause-based sites. Versions 15.3.11 and below include a critical deserialization vulnerability in the Helpdesk module which is not enabled by default. This vulnerability allows Remote Code Execution RCE b...
Oracle Primavera Unifier (January 2026 CPU)
The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Integration Apache Tika. Supported versions th...
Carlsberg Event Wristband Leaked PII, Researcher Told Not to Disclose
A poorly secured wristband system used at a Carlsberg exhibition allowed access to visitor photos, videos, and full names. Attempts to report the issue were ignored for months...
Ubuntu: Security Advisory (USN-7966-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Yonyou KSOA SQL injection vulnerability
Yonyou KSOA is an enterprise-level management software developed by Yonyou Corporation in China. Version 9.0 of Yonyou KSOA contains a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameter IDs in the component’s HTTP GET Parameter Handler, specifically for...
Exploit for Deserialization of Untrusted Data in Microsoft
WSUS Security Research Toolkit !Pythonhttps://img.shields...
OPENSUSE-SU-2026:20055-1 Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: Update to 3.0.6: - Security: - During development, we received reports from the Zero Day Initiative of potential security issues with some of our file import plug-ins. While these issues are very unlikely to occur with real files,...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001821)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001821 advisory. Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attacker...
EUVD-2026-2784
An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generating a report. An authenticated attacker can exploit this issue via error-based SQL injection, allowing for the extraction of arbitrary data from the database...
CVE-2025-68968
creationtimestamp| type| source ---|---|--- 2026-01-14 04:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mce6pck4gq2m 2026-01-14 05:52:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mceeui53tx2q...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: iouring/zctx: Check chained notification contexts. Send zc only when there are links in ubufinfo for requests coming from the same context. There are some ambiguous reports from syz, so let’s examine the assumption regarding...
Exploit for CVE-2026-21858
🔒 Ni8mare Scanner Ethical Security Scanner for CVE-2026-218...
CVE-2021-41557
Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting XSS. An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section or change existing work orders. The XSS payload is in the work order number...
CVE-2021-27509
In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...