261990 matches found
Updated perl-Config-IniFiles package fixes a security vulnerability
The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...
CVE-2026-12228
creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...
CVE-2026-15322
creationtimestamp| type| source ---|---|--- 2026-07-18 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtunfxgl2l 2026-07-19 05:13:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqxzh7sx6a2d 2026-07-19 05:14:11+00:00| seen|...
CVE-2026-16122
creationtimestamp| type| source ---|---|--- 2026-07-18 16:29:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqworhbu2r2a...
CVE-2025-71390
creationtimestamp| type| source ---|---|--- 2026-07-18 16:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwnl5sz7s2i...
GHSA-RWW4-4W9C-7733 vulnerabilities
Vulnerabilities for packages: mcp-atlassian...
CVE-2026-9147
creationtimestamp| type| source ---|---|--- 2026-07-18 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941221213811825 2026-07-18 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g 2026-07-18 14:00:39+00:00| seen|...
CVE-2024-58356 SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE
SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions via OVERWRITE does not take effect, a...
CVE-2026-16117
Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for route matching, but request.url retains the original encoded form, and the prefix-rewrite step uses a literal string...
CVE-2026-16088
creationtimestamp| type| source ---|---|--- 2026-07-18 12:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwbj72jdk2i...
CVE-2026-16085
creationtimestamp| type| source ---|---|--- 2026-07-18 12:27:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwbaag7qg2e...
CVE-2026-7872
creationtimestamp| type| source ---|---|--- 2026-07-18 12:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw7quhq3m2a...
CVE-2026-62299
creationtimestamp| type| source ---|---|--- 2026-07-18 10:38:28+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw34zsflf2p 2026-07-18 10:38:31+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw355eeak2l 2026-07-18 10:38:34+00:00| seen|...
CVE-2026-47865
VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed in 30.2.7...
CVE-2026-16083
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhook.ParseRequest of the file pkg/channels/line/line.go of the component LINE Webhook. The manipulation results in authentication bypass by capture-replay. The attack may be launched remotely. The...
CVE-2026-16085 Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has be...
CVE-2026-13445
creationtimestamp| type| source ---|---|--- 2026-07-18 09:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvokzq3x2c 2026-07-21 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr6dwfosuq2y...
CVE-2026-47871 VMware Avi Load Balancer Directory Traversal Vulnerability
VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 fixed in 32.1.2 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed...
CVE-2026-47870
CVE-2026-47870 affects VMware Avi Load Balancer. A malicious authenticated user with network access can potentially execute remote code due to a privilege-escalation flaw. Affected versions and fixes shown in public records: 32.1.1 (fixed in 32.1.2); 31.1.1–31.2.2 (fixed in 31.2.2-2p3); 30.1.1–30...