261710 matches found
CVE-2026-16351 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-RJR7-JGGH-PGCP vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, telegraf, karma...
GHSA-PGGX-2V9R-J6GM vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-56722 Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...
CVE-2026-59689
creationtimestamp| type| source ---|---|--- 2026-07-28 20:15:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755 2026-07-28 20:45:12+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-7 2026-08-13...
CVE-2026-16581 Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...
CVE-2026-16581
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...
EUVD-2026-50015
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled...
CVE-2026-54609
creationtimestamp| type| source ---|---|--- 2026-07-28 19:31:15+00:00| seen| https://gist.github.com/alon710/543be0bac4447ae891730d56e63e4ffd...
CVE-2026-48388
creationtimestamp| type| source ---|---|--- 2026-07-28 19:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq53ijlk62q...
CVE-2026-47768
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...
CVE-2026-51266
creationtimestamp| type| source ---|---|--- 2026-07-28 19:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ptqcxj2z 2026-07-29 08:03:11+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrrhlisiup2n...
CVE-2026-51260
creationtimestamp| type| source ---|---|--- 2026-07-28 19:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4m7sgsu2y...
CVE-2026-51252
creationtimestamp| type| source ---|---|--- 2026-07-28 19:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ipgtta2u 2026-07-29 00:02:49+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrqmqkcihu2i...
CVE-2026-66745
creationtimestamp| type| source ---|---|--- 2026-07-28 19:09:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq4e5jyet2i 2026-07-28 20:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq77z7zsg2e...
CVE-2026-48390
creationtimestamp| type| source ---|---|--- 2026-07-28 18:51:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3du7bp62q 2026-08-06 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgoqfwnpd2y...
CVE-2026-47768
CVE-2026-47768 affects nebula-mesh up to and including v0.3.1, where newly minted operator API keys are exposed in the redirect URL?new_key and related query strings. The root cause is tokens being placed in the URL during the handleOperatorCreateAPIKey flow, making them observable via the browse...
SUSE CVE-2026-8763
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
CVE-2026-54603
OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Clientrequest overrides the request authority, so the bearer Authorization header is sent to an...
