GHSA-WC96-39FC-566F vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, apache-hop-fips, tinkerpop, hadoop-fips, cassandra, tez, seata, pinot, cassandra-fips, apache-hop, pinot-fips...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, apache-hop-fips, tinkerpop, hadoop-fips, cassandra, tez, seata, pinot, cassandra-fips, apache-hop, pinot-fips...

GHSA-JPPX-W49H-X2QQ vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, request-9047-keycloak-fips, spark-kubernetes-operator, strimzi-kafka-operator-fips, traccar, druid, spark-fips, logstash, camunda-zeebe, neo4j, opensearch-fips, apache-hop-fips, s3proxy, tinkerpop, floci, tez, keycloak-fips, seata, pinot,...

CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, cassandra, thingsboard...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: flyway, apache-nifi, neo4j, infinispan, thingsboard, apache-pulsar, kserve-modelmesh, celeborn, akhq, cloudwatch-exporter, keycloak, druid, wavefront-proxy, management-api-for-apache-cassandra-5.0, spark, strimzi-kafka-operator, apicurio-registry, zipkin, logstash,...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: flyway, apache-nifi, neo4j, infinispan, thingsboard, apache-pulsar, kserve-modelmesh, celeborn, akhq, cloudwatch-exporter, keycloak, druid, wavefront-proxy, management-api-for-apache-cassandra-5.0, spark, strimzi-kafka-operator, apicurio-registry, zipkin, logstash,...

CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

CVE-2026-11922

The CVE-2026-11922 entry describes a rate-limit bypass in zenml-io/zenml (versions 0.57.0–0.94.2). The issue arises because the rate limiter uses request.client.host (derived from the X-Forwarded-For header when Uvicorn is run with --proxy-headers --forwarded-allow-ips *), allowing an attacker to...

CVE-2026-15616

creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...

CVE-2026-61666 vulnerabilities

Vulnerabilities for packages: pghero-fips, gitlab-rails-ce, ruby4.0-rails, pghero...

CVE-2026-54133 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

SUSE CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

CVE-2026-58275

creationtimestamp| type| source ---|---|--- 2026-07-24 00:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3t3nspm23 2026-07-24 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972364326396269 2026-07-24 01:30:36+00:00| seen|...

CVE-2026-50517

creationtimestamp| type| source ---|---|--- 2026-07-24 00:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3lxvk4l2q 2026-07-24 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973425505418571 2026-07-24 06:00:28+00:00| seen|...

CVE-2026-14899

creationtimestamp| type| source ---|---|--- 2026-07-24 00:01:16+00:00| seen| https://bsky.app/profile/slackers.it/post/3mre2d6b3mi2p 2026-07-29 00:45:04+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

CVE-2026-35425

CVE-2026-35425 concerns Azure API Management (APIM) with an “Improper access control” condition that enables a network-exposed remote code execution by an authorized attacker. Affected software is APIM; the root cause is access-control weaknesses that allow code execution over the network. The pr...

CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability

...

Important: nvidia-persistenced

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

PT-2026-64242

The CAFEHAUS API WordPress plugin through 1.0.0 does not have any authentication or authorisation when updating user passwords, allowing unauthenticated attackers to set the password of any user, including administrators, and fully take over their accounts...

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware() function in the Django web application framework allows attackers to disclose sensitive information that should be protected.

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware middleware in the Django web application framework is related to improper handling of registrations. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by this middleware...