260245 matches found
CVE-2026-54272
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known IPv6...
CVE-2026-12394
creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7mmhgz24...
DEBIAN-CVE-2026-17572
Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...
CVE-2026-56822
A flaw was found in Netty's netty-handler-ssl-ocsp component. This vulnerability involves a time-of-check/time-of-use TOCTOU race condition within the OCSP stapling validator. A remote attacker could exploit this timing window, allowing them to use a certificate that has been revoked for...
CVE-2026-65564
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...
CVE-2026-59690
creationtimestamp| type| source ---|---|--- 2026-07-27 15:06:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrn6clq6mb2l 2026-07-27 15:06:31+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116992559643254224 2026-07-28 20:15:12+00:00| seen|...
CVE-2026-65876
creationtimestamp| type| source ---|---|--- 2026-07-27 15:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn6bteuug24...
CVE-2026-13332
creationtimestamp| type| source ---|---|--- 2026-07-27 15:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn66bnwxn2u...
CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
openjdk: OpenJDK: Improve DTLS handshaking (Oracle CPU 2026-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM...
CVE-2026-66475 WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...
ROOT-OS-DEBIAN-13-CVE-2026-8924 CVE-2026-8924 in rootio-curl - Patched by Root
Root has patched CVE-2026-8924 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54310 CVE-2026-54310 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54310 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54312 CVE-2026-54312 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54312 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54307 CVE-2026-54307 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54307 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54314 CVE-2026-54314 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54314 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54313 CVE-2026-54313 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54313 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54309 CVE-2026-54309 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54309 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
CVE-2026-56537
HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...
EUVD-2026-49180
An access control vulnerability in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows multiple simultaneous sessions to run without proper client validation or session integrity checks. An attacker with a modified version of the app can connect to the robot during an active,...