262331 matches found
CVE-2026-56842
creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj4mzudb2v 2026-07-02 18:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpooxqxrlq2z 2026-07-03 07:26:23+00:00| seen|...
EUVD-2026-41412
The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tlshandshake13:handlepresharedkey/3, an OfferedPreSharedKeys record with a...
EUVD-2026-41409
Craft CMS is a content management system CMS. Versions 5.7.0 and above, prior to 5.9.21 contain a mass-assignment flaw in the bulk-duplicate element action. An attacker who is only able to duplicate their own entires can submit an arbitrary id through the newAttributes request parameter. The...
CVE-2026-54408
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming...
CVE-2026-55111
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight...
CVE-2026-54403
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances...
CVE-2026-55116
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices...
CVE-2026-14355
creationtimestamp| type| source ---|---|--- 2026-07-02 14:39:44+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpob5prgns2v 2026-07-02 14:41:26+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpobaraj7c2v 2026-07-02 14:43:07+00:00| seen|...
CVE-2026-12166 CVE-2026-12166
A NULL pointer dereference vulnerability for driver GFACSysx64.sys in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash...
CVE-2026-38891
creationtimestamp| type| source ---|---|--- 2026-07-02 14:30:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoamueozu2n 2026-07-03 09:24:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7zgfzit2p...
CVE-2026-54712
creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w 2026-07-03 09:15:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y 2026-07-29 20:31:26+00:00| seen|...
GHSA-Q6C7-56CQ-G2WM vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-CQP7-WF4C-3XGC vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-64JQ-M7RQ-768H vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-VQPH-P5VC-G644 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-2PF9-VR92-6H3V vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
PYSEC-2026-676 MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
Cross-site scripting XSS vulnerability in the antispam feature security/antispam.py in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content...
PYSEC-2026-758 Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...
PYSEC-2026-659 mailman Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...