CVE-2026-33815 vulnerabilities

Vulnerabilities for packages: gitaly, teleport...

GHSA-HPCV-96WG-7VJ8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse...

UBUNTU-CVE-2026-48823

Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-Site Scripting XSS vulnerability in the tag filtering functionality of Shaarli. An authenticated user can inject arbitrary JavaScript into the tags field when creating a bookmark Shaare. The malicious...

CVE-2026-54388

Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all duplicate headers to the backend while using the first value to determine how many request body bytes to consume. Remote attackers can...

CVE-2026-12300

creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

DRUPAL-CORE-2026-007

Drupal core ships a rebuild.php front controller that can be used to rebuild Drupal clearing the caches and rebuilding the container when the site is in an unexpected condition. This script doesn't correctly check the Host header against the list of trusted host patterns. This could result in cac...

GHSA-FXJ4-P9XP-37V5 HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS

Summary The fix for CVE-2026-45367 added RegexTimeout protection to the matches function in DSTU2016MAY, DSTU3, R4, R4B, and R5, but the DSTU2 module was incompletely patched. In org.hl7.fhir.dstu2, replaceMatches was updated while matches at line 2462 still calls the raw String.matchessw without...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the distutils.fileutil.writefile function. An attacker can overwrite critical system files by crafting...

EUVD-2026-37617

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

EUVD-2026-37613

Unauthenticated Privilege Escalation in LoginPress Pro = 6.2.2 versions...

EUVD-2026-37651

Unauthenticated Cross Site Scripting XSS in Auto Repair = 22.6 versions...

EUVD-2026-37542

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-32652

creationtimestamp| type| source ---|---|--- 2026-06-17 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwvvb3cm2j...

CVE-2026-35069

creationtimestamp| type| source ---|---|--- 2026-06-17 18:16:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwb5s5iv2s...

NPM: webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

NPM: webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies vulnerability discovered by ? in WordPress Npm webpack-dev-server versions 5.2.5...

CVE-2026-42055

creationtimestamp| type| source ---|---|--- 2026-06-17 17:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiunvadrb24 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen|...

ROOT-APP-MAVEN-CVE-2024-27309 CVE-2024-27309 in io.root.org.apache.kafka:kafka-metadata - Patched by Root

Root has patched CVE-2024-27309 in the io.root.org.apache.kafka:kafka-metadata package for Root:Maven. Multiple fixed versions available...

CVE-2026-9678

creationtimestamp| type| source ---|---|--- 2026-06-17 17:10:11+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiskw2as22g 2026-06-18 15:59:05+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n6k5o27...

CVE-2022-44462

creationtimestamp| type| source ---|---|--- 2026-06-17 16:27:22+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3moiq6fov5l2c...

CVE-2026-49268

creationtimestamp| type| source ---|---|--- 2026-06-17 15:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moimkre7522k 2026-06-18 17:05:17+00:00| seen| https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y 2026-06-22 00:31:29+00:00| seen|...