260025 matches found
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
GHSA-8R6M-32JQ-JX6Q vulnerabilities
Vulnerabilities for packages: tileserver-gl...
SUSE CVE-2026-64236
In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...
CVE-2025-71408
creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...
CVE-2026-66139
creationtimestamp| type| source ---|---|--- 2026-07-24 22:55:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgh4sbdvf2n...
CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-P63J-VCC4-9VMV vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-C2J3-45GR-MQC4 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-64641 vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-62835
creationtimestamp| type| source ---|---|--- 2026-07-24 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a 2026-07-24 20:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421 2026-07-24 22:01:36+00:00| seen|...
GO-2026-5208 Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown
Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown...
GO-2026-5585 Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber...
CVE-2026-66027
creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...
CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
SUSE CVE-2026-16805
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-64237
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...
EUVD-2026-44929
Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF...
CVE-2026-65709
CVE-2026-65709 concerns sysPass up to version 3.2.11, with a missing object-level authorization vulnerability in the JSON-RPC API. The issue allows API token holders to enumerate account metadata, overwrite passwords, and delete accounts across the entire vault without per-account access checks. ...