262001 matches found
ROS-20260714-73-0031
The vulnerability of the GNW protocol analyzer, which is part of the Wireshark network traffic analyzer, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...
PT-2026-58270
Name of the Vulnerable Software and Affected Versions Azure CycleCloud versions prior to 8.9.1-3806 Description Missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations Upgrade to build 8.9.1-3806...
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in...
CVE-2026-13039
creationtimestamp| type| source ---|---|--- 2026-07-13 23:24:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktmni3so2c...
Updated libxml2 packages fix a security vulnerability
The updated packages fix a security vulnerability: Denial of service via crafted xsd-validated document. CVE-2026-6732...
MGASA-2026-0249 Updated ffmpeg packages fix a security vulnerability
The updated packages fix a security vulnerability: Heap out-of-bounds write via odd sliceheight in FFmpeg MagicYUV decoder. CVE-2026-8461...
Updated ffmpeg packages fix a security vulnerability
The updated packages fix a security vulnerability: Heap out-of-bounds write via odd sliceheight in FFmpeg MagicYUV decoder. CVE-2026-8461...
CVE-2026-57855 Cockpit CMS Missing Authorization in Bucket File Storage API
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php executes bucket commands ls, upload, removefiles, rename, createfolder without performing any ACL or role check. Any authenticated...
CVE-2026-62187
OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...
CVE-2026-48364
creationtimestamp| type| source ---|---|--- 2026-07-13 22:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkowz65vj2m 2026-07-13 22:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkp75gusk2l 2026-07-19 17:37:06+00:00| seen|...
CVE-2026-39676
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/90020 2026-07-14 00:00:37+00:00| seen| https://t.me/GithubRedTeam/90020 2026-07-15 00:00:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90020...
CVE-2026-4253
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:18+00:00| seen| https://t.me/GithubRedTeam/90566 2026-07-14 00:00:34+00:00| seen| https://t.me/GithubRedTeam/90566 2026-07-15 00:00:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90566 2026-07-16 19:00:31+00:00| seen|...
CVE-2026-15598 antv layout object.js setNestedValue prototype pollution
A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...
CVE-2026-15680 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit th...
CVE-2026-62199
Summary (based on provided documents): OpenClaw versions prior to 2026.6.6 contain a flaw in host execution environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path may supply crafted envir...
CVE-2026-62192
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester...
Updated libtiff packages fix a security vulnerability
The updated packages fix a security vulnerability: Denial of Service via large SamplesPerPixel tag. CVE-2026-36849...
MGASA-2026-0244 Updated perl-List-SomeUtils-XS packages fix security vulnerability
List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function. CVE-2026-12844...