CVE-2026-53142

In the Linux kernel, the following vulnerability has been resolved: drm/xe/display: fix oops in suspend/shutdown without display The xe driver keeps track of whether to probe display, and whether display hardware is there, using xe-info.probedisplay. It gets set to false if there's no display aft...

CVE-2026-53132

CVE-2026-53132 affects the Linux kernel vsock/virtio, where receiving zero-length packets with VIRTIO_VSOCK_SEQ_EOM could cause an unbounded skb queue growth, exhausting memory. The root cause is a miscalculation of backlog: vvs->rx_bytes + len > vvs->buf_alloc allows large queues when l...

CVE-2026-9702

creationtimestamp| type| source ---|---|--- 2026-06-25 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp3vvpptdm2u 2026-06-25 07:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116809572458310891...

BELL-CVE-2026-52942

Bulletin has no description...

CVE-2026-13031

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-30 22:07:07+00:00| seen|...

CVE-2026-12246

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...

CVE-2026-45188

creationtimestamp| type| source ---|---|--- 2026-06-25 04:57:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3neyzior2i...

CVE-2026-46752

creationtimestamp| type| source ---|---|--- 2026-06-25 04:42:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3mk3hdhq2w 2026-06-25 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp4eylvcab2b 2026-06-25 12:00:39+00:00| seen|...

CVE-2026-0934 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with custom role permissions to view, create, or delete protected environment configuratio...

CVE-2026-5309

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user to read or modify another group's virtual registry cleanup policy settings without...

SUSE CVE-2023-30421

mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114...

CVE-2026-10043

creationtimestamp| type| source ---|---|--- 2026-06-25 02:41:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp3fq6z37d22...

SUSE CVE-2026-0864

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value...

CVE-2026-57589

creationtimestamp| type| source ---|---|--- 2026-06-25 02:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3f447rn42l 2026-07-08 01:10:04+00:00| seen| https://bsky.app/profile/lobsters-feed.bsky.social/post/3mq3wpi5hat2y 2026-07-08 10:01:20+00:00| seen|...

SUSE CVE-2026-40186

ApostropheCMS is an open-source Node.js content management system. A regression introduced in commit 49d0bb7, included in versions 2.17.1 of the ApostropheCMS-maintained sanitize-html package bypasses allowedTags enforcement for text inside nonTextTagsArray elements textarea and option...

SUSE CVE-2026-54515

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual, per-property @JsonIgnoreProperties exclusions are applied by handleByNameInclusion, producing a...

GHSA-J3RV-43J4-C7QM vulnerabilities

Vulnerabilities for packages: cassandra-reaper, infinispan, cassandra, celeborn, flyway, scala, druid, strimzi-kafka-operator, logstash, kafka, kserve-modelmesh, confluent-common-docker, gradle, apache-tika, akhq, opensearch, airflow, neo4j, wavefront-proxy, sonarqube, ruby3.4-jrjackson, solr,...

CVE-2026-55454

creationtimestamp| type| source ---|---|--- 2026-06-25 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp34rdzebt2t 2026-06-25 00:01:01+00:00| seen| https://infosec.exchange/users/offseq/statuses/116807803619283441 2026-06-25 02:18:48+00:00| seen|...

PT-2026-52500

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.1780-lts, the authenticated endpoint POST /api/data-sources/decrypt returns the decrypted plaintext for any credential whose credential id is supplied in t...

PT-2026-52525

Name of the Vulnerable Software and Affected Versions pnpm versions 11.3.0 through 11.5.2 Description The pnpm stage download command derives a local filename using package name and version fields controlled by the registry. A crafted manifest can lead to a path traversal, allowing an attacker to...