264140 matches found
vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or furth...
Important: Red Hat Security Advisory: giflib security update
An update for giflib is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
CVE-2026-12240
creationtimestamp| type| source ---|---|--- 2026-06-30 10:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpis2mbdhh2u 2026-06-30 22:17:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjzrq4vsk2i...
CVE-2025-24816
creationtimestamp| type| source ---|---|--- 2026-06-30 10:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqx6zo5j2j...
CVE-2026-49434
Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify entries in LDAP that match the configured searchBase and searchFilter can instantiate denied transports inside the broker JVM. This can be used...
CVE-2026-52760
A Cross-site Scripting (XSS) vulnerability exists in Apache ActiveMQ and the Apache ActiveMQ Web Console because the browse page renders a message ID directly without proper sanitization. This allows an authenticated producer to send a message with a crafted JMS message ID containing HTML or Java...
ROOT-APP-MAVEN-CVE-2026-35554 CVE-2026-35554 in io.root.org.apache.kafka:kafka-clients - Patched by Root
Root has patched CVE-2026-35554 in the io.root.org.apache.kafka:kafka-clients package for Root:Maven. Multiple fixed versions available...
Global Buffer Overflow in GNU gzip
...
Exploit for Improper Authentication in Oracle E-Business_Suite
cve-id ⚡ Simple Usage Use this project only in safe and...
ROOT-APP-NPM-CVE-2026-41650 CVE-2026-41650 in @rootio/fast-xml-parser - Patched by Root
Root has patched CVE-2026-41650 in the @rootio/fast-xml-parser package for Root:npm. Multiple fixed versions available...
CVE-2026-12819
creationtimestamp| type| source ---|---|--- 2026-06-30 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116837883833246326 2026-06-30 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpiiaagojq2p 2026-06-30 10:19:08+00:00| seen|...
CVE-2026-56808
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...
CVE-2026-12818
Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...
CVE-2024-21172
creationtimestamp| type| source ---|---|--- 2026-06-30 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpigwk6mpi2x...
CVE-2026-12819 DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability
Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...
CVE-2026-43731
creationtimestamp| type| source ---|---|--- 2026-06-30 04:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpi536glcj26 2026-07-01 02:50:21+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...
GHSA-72M5-FVVV-55M6 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-3WRR-7QPF-2PRH vulnerabilities
Vulnerabilities for packages: druid, seata, spark, kayenta-fips, hadoop-client-modules, kayenta, hadoop-fips, spark-fips...
SUSE CVE-2026-12490
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port and not the tls-auth-port or over over TCP over the regular...