937 matches found
CVE-2026-64441
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetsecie, rtwgetwapiie, and rtwgetwpsattr Three IE/attribute parsing functions have missing bounds checks. rtwgetsecie and rtwgetwapiie iterate over a raw IE buffer without verifying that t...
CVE-2026-64441
The CVE-2026-64441 fix applies to the Linux kernel staging rtl8723bs code and addresses out-of-bounds reads in three IE/attribute parsers: rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr(). The patch adds cnt+2 bounds checks before loop bodies in rtw_get_sec_ie() and rtw_get_wapi_ie(), ...
CVE-2026-64441
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetsecie, rtwgetwapiie, and rtwgetwpsattr Three IE/attribute parsing functions have missing bounds checks. rtwgetsecie and rtwgetwapiie iterate over a raw IE buffer without verifying that t...
CVE-2026-44761
creationtimestamp| type| source ---|---|--- 2026-07-14 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkypxf4yz2v 2026-07-14 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116915740682728635 2026-07-14 01:30:27+00:00| seen|...
EUVD-2026-39543
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
CVE-2026-53055
creationtimestamp| type| source ---|---|--- 2026-06-24 19:13:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806673458605612...
CVE-2026-8673
creationtimestamp| type| source ---|---|--- 2026-06-17 21:19:15+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojaidpcwb2j...
PT-2026-52180
Name of the Vulnerable Software and Affected Versions WeasyPrint affected versions not specified Description A CSS injection issue occurs when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing the injection of arbitrary CSS declarations. This...
CVE-2026-11122
creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...
CVE-2026-9757
creationtimestamp| type| source ---|---|--- 2026-05-30 13:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn34gdzo4b2q 2026-05-30 16:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3gegww3f2s...
PT-2026-47201
Unknown description...
CVE-2026-45850
creationtimestamp| type| source ---|---|--- 2026-05-27 14:46:18+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116647078508044131 2026-07-01 02:34:49+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:15:49+00:00|...
PT-2026-47211
Name of the Vulnerable Software and Affected Versions Symfony versions prior to 5.4.31 Symfony versions prior to 6.4.11 Description SymfonyComponentHttpClientNoPrivateNetworkHttpClient is a decorator designed to block requests to private networks. However, the list of blocked subnets omits severa...
CVE-2017-17670
creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05...
CVE-2026-34910
creationtimestamp| type| source ---|---|--- 2026-05-22 14:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116618778795603147 2026-05-26 09:13:20+00:00| seen| https://ccb.belgium.be/advisories/warning-ubiquiti-has-addressed-multiple-critical-vulnerabilities-unifi-os-patch 2026-05-...
PT-2026-41418
wow CVE-2026-22931203921321321...
PT-2026-45007
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.480 Description The software constructs all or part of a code segment using externally-influenced input from an upstream component without properly neutralizing special elements. This can modify the syntax or behavior...
MINI-8FW9-FC44-57P4
Bulletin has no description...
CVE-2021-47935
creationtimestamp| type| source ---|---|--- 2026-05-10 17:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljal4247t2q 2026-05-18 09:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm4lb7gj2p2p...