262016 matches found
CVE-2026-14147 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-437F-8GM2-935W vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8588-2H56-WX82 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-21041
creationtimestamp| type| source ---|---|--- 2026-07-10 08:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqboymq5bl2e 2026-07-10 09:36:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtxonpzj2e...
CVE-2026-12276
creationtimestamp| type| source ---|---|--- 2026-07-10 07:57:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbofvnxrv2x 2026-07-10 10:40:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbxje4zob2d 2026-07-10 16:50:17+00:00| seen|...
CVE-2026-47240
A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is possible when an IMAP server does not support non-synchronizing literals, leading to the...
CVE-2026-15321
creationtimestamp| type| source ---|---|--- 2026-07-10 05:42:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgugdthm2a...
CVE-2026-13430
creationtimestamp| type| source ---|---|--- 2026-07-10 05:42:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgtwfjbv27...
CVE-2026-15331
A vulnerability was identified in zhayujie CowAgent up to 2.1.0. The affected element is the function addurl/addpackage of the file agent/skills/service.py of the component Skill Installation Handler. The manipulation of the argument Name leads to path traversal. The attack may be initiated...
EUVD-2026-42795
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.2.28 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.40 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...
SUSE CVE-2026-8286
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...
PT-2026-57219
Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.5.2 Description An authentication bypass exists because the software fails to protect the /codex endpoint in src/dashboardGuard.js before next.config.mjs rewrites /codex/ to /api/v1/responses. A remote unauthenticat...
CVE-2026-59856
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...
The vulnerability of the tarfile module in the Python programming language, which allows attackers to compromise the integrity of protected information
The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
PT-2026-57269
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.2 Description An authorization flaw exists in the IT asset and license management system. The endpoint "/api/v1/kits/kit id/licenses" verifies if the user has permissions to edit kits but fails to authorize acces...
CVE-2026-44918
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...
Linux Distros Unpatched Vulnerability : CVE-2026-59818
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls t...
