1406018 matches found
CVE-2026-48021
CVE-2026-48021 affects epa4all prior to 2026-05-20. An attacker who can intercept TLS between epa4all and the ePA backend could complete the VAU handshake with attacker-controlled keys, deriving session encryption keys. This allows reading and modifying inner HTTP traffic (including patient conse...
CVE-2026-48021
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...
EUVD-2026-48733
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...
EUVD-2026-42628
Open WebUI: Upload metadata.knowledgeid bypasses the knowledge-base write-access check read-only users can add files to KB...
CVE-2026-66027
creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.5.0-1.4.hum1 aarch64, x8664 nodejs26-bin-26.5.0-1.4.hum1 noarch nodejs26-devel-26.5.0-1.4.hum1 aarch64, x8664 nodejs26-docs-26.5.0-1.4.hum1 noarch...
GHSA-R277-6W6Q-XMQW kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
Summary ValidationHandler.Load in getkin/kin-openapi silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which always returns nil without performing any credential check. Because this substitution happens unconditionally when the caller omits the field, every OpenAPI security...
CVE-2026-15966
creationtimestamp| type| source ---|---|--- 2026-07-24 16:45:08+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-6...
CVE-2026-15967
creationtimestamp| type| source ---|---|--- 2026-07-24 16:45:05+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-6...
CVE-2026-15968
creationtimestamp| type| source ---|---|--- 2026-07-24 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-6...
EUVD-2026-47871
@fastify/static vulnerable to route guard bypass via path traversal...
CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
GHSA-6P8H-3WGX-97GF GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks
Summary GitPython's unsafegitcloneoptions denylist omits --template. git clone --template= copies /hooks/ into the new repository and runs them post-checkout fires during clone, so a caller who can influence clone options can achieve arbitrary command execution in the default...
CVE-2026-54673
creationtimestamp| type| source ---|---|--- 2026-07-24 16:35:24+00:00| published-proof-of-concept| https://github.com/electron-userland/electron-builder/security/advisories/GHSA-p2f4-r6v6-j797...
CVE-2026-63632
creationtimestamp| type| source ---|---|--- 2026-07-24 16:35:09+00:00| published-proof-of-concept| https://github.com/onnx/onnx/security/advisories/GHSA-p893-rvq9-2xf9...
SUSE CVE-2026-16805
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-16807
Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-63869
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in ieee80211parsetxradiotap When parsing the radiotap header of an injected frame, ieee80211parsetxradiotap uses the IEEE80211RADIOTAPANTENNA value directly as a shift count:...
GHSA-38HQ-7X33-PHP4 @backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass
Impact The allowlist matching used by the experimental dynamic client registration and client ID metadata document CIMD features in @backstage/plugin-auth-backend matched glob patterns against the full URL string. A wildcard could therefore match across URL component boundaries: a pattern such as...