18574 matches found
CVE-2026-54574
proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through extractplaintar in prootdistro/commands/install.py and Docker layers through applylayer in prootdistro/helpers/docker.py without validating...
CVE-2026-18255 Quay: quay: global read-only superuser can view robot account tokens
A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...
io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2
A flaw was found in Netty's netty-codec-http2 component. The HTTP/2 encoder does not properly handle special characters in HTTP headers. This vulnerability allows a remote attacker to craft specific HTTP/2 requests, leading to HTTP response splitting and header injection attacks. Such attacks can...
CVE-2026-14270
creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrs5ntfd6j25 2026-07-29 15:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wm6hse2d 2026-07-29 15:58:24+00:00| seen|...
CVE-2026-41701
A flaw was found in Spring AMQP. The system generates predictable correlation identifiers IDs for message replies due to an internal simple counter. This predictability could allow an attacker to potentially infer or manipulate message flows, leading to a low impact on the confidentiality and...
CVE-2026-65325
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....
UBUNTU-CVE-2026-54619
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version...
UBUNTU-CVE-2026-62434
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-13869
An use after free flaw was found in the Device component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497610642...
CVE-2026-13796
An integer overflow flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=491894115...
CVE-2026-13810
An inappropriate implementation flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504600482...
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt's GitHub advisory, lets an unauthenticated attacke...
CVE-2026-13803
A type confusion flaw was found in the Chrome Tabs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501669642...
CVE-2026-13819
An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512962749...
CVE-2026-13787
An use after free flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522919313...
CVE-2026-13801
An integer overflow flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500587568...
CVE-2026-13825
An uninitialized use flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513209610...
CVE-2026-13884
A heap buffer overflow flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500077014...
CVE-2026-13849
An insufficient validation of untrusted input flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517351411...