260861 matches found
google-osconfig-agent-20260708.00-3.1 on GA media (moderate)
google-osconfig-agent-20260708.00-3.1 on GA media Announcement ID: openSUSE-SU-2026:11349-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...
CVE-2025-71408
creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...
CVE-2026-66139
creationtimestamp| type| source ---|---|--- 2026-07-24 22:55:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgh4sbdvf2n...
GHSA-46Q4-43PH-C6FR blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
Summary blaze-server can merge HTTP/1.1 chunked-body trailer fields into Request.headers. Because trailer fields are attacker-controlled, an unauthenticated remote client can inject arbitrary header names/values e.g. X-Forwarded-For, internal-auth headers that a fronting proxy sanitized from the...
CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password
Weintek cMT3092X HMI stores user account passwords in plaintext...
CVE-2025-71408
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2026-64641 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-C2J3-45GR-MQC4 vulnerabilities
Vulnerabilities for packages: langfuse, opensearch-dashboards, nextcloud-server...
GHSA-P63J-VCC4-9VMV vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-62835
creationtimestamp| type| source ---|---|--- 2026-07-24 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a 2026-07-24 20:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421 2026-07-24 22:01:36+00:00| seen|...
GO-2026-5585 Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber...
GO-2026-5208 Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown
Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown...
CVE-2026-66027
creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...
CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
SUSE CVE-2026-16805
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-64237
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...
