54191 matches found
CVE-2026-21932
...
PSF-2026-6
User-controlled header names and values containing newlines can allow injecting HTTP headers...
CVE-2025-67473
creationtimestamp| type| source ---|---|--- 2026-01-20 20:18:09+00:00| seen| Telegram/94xF8qOf6a9zFTfjcIBBKIfclAWvX8OYrbzJopUPnpCqSjk...
CVE-2025-9281
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device reboots...
CVE-2025-14377
CVE-2025-14377 concerns the legacy Ansible playbook component of Verve Asset Manager. The issue arises from plaintext secrets being stored during playbook execution. This component has been retired and has been optional since the 1.36 release in 2024. The CVSS v4.0 score is 8.8 (HIGH), with netwo...
CVE-2026-0899
Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
MiracleLinux 7 : firefox-115.10.0-1.0.1.el7.AXS7 (AXSA:2024-7697:15)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7697:15 advisory. GetBoundName in the JIT returned the wrong object CVE-2024-3852 Out-of-bounds-read after mis-optimized switch statement CVE-2024-3854 Incorrect...
MiracleLinux 7 : java-11-openjdk-11.0.19.0.7-1.el7 (AXSA:2023-5304:06)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5304:06 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK:...
PT-2026-3562
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...
PT-2026-3565
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...
PT-2026-3568
Name of the Vulnerable Software and Affected Versions ArmorStart® LT affected versions not specified Description A security issue can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing the Link State...
GHSA-53WG-R69P-V3R7 GraphQL Modules has a Race Condition issue
Summary Originally reported as an issue 2613 but should be elevated to a security issue as the ExecutionContext is often used to pass authentication tokens from incoming requests to services loading data from backend APIs. Details When 2 or more parallel requests are made which trigger the same...
EUVD-2026-2929
Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest...
GHSA-7C2F-R6GC-H92H Apache Airflow proxy credentials for various providers might leak in task logs
In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...
CVE-2026-0975
creationtimestamp| type| source ---|---|--- 2026-01-16 07:35:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjlkq5tq62x 2026-01-16 14:05:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckbf7zq7o2b 2026-01-22 11:00:00+00:00| seen|...
EUVD-2026-3074
Malicious code in eniram-web-common-ui npm...
MAL-2026-303 Malicious code in sd-active-conversation-module-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278082132569830ff8cb8dd522f0e5284296ea09a1eebfbebffd95656cfe9c63 The package sd-active-conversation-module-client was found to contain malicious code. Source: ghsa-malware...
MAL-2026-300 Malicious code in presentation-test-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b481e6b9e82f740ebadaad84b281196fae93b52b14c302f7763234319c732f3e The package presentation-test-utilities was found to contain malicious code. Source: ghsa-malware...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002392)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002392 advisory. The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended...