1436120 matches found
CVE-2026-75897
creationtimestamp| type| source ---|---|--- 2026-08-20 18:36:37+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mtjvagabjp2z...
CVE-2026-53584
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...
CGA-8XXM-GC5X-RMJG
Bulletin has no description...
DEBIAN-CVE-2026-73251
Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...
MAL-2026-14331 Malicious code in exam-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...
Malicious code in @pablo_clueless/sniffr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
yggdrasil security update
An update is available for yggdrasil. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list yggdrasil is a system daemon that subscribes to topics on an MQTT broker a...
java-17-openjdk security update
An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...
CVE-2026-77176
creationtimestamp| type| source ---|---|--- 2026-08-20 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtap5dbe2z 2026-08-21 02:02:29+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtko5oxiwy2e...
EUVD-2026-63494
Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...
ROOT-APP-MAVEN-CVE-2026-2332 CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root
Root has patched CVE-2026-2332 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...
GHSA-89V8-RHWQ-HF77 asteval has a Sandbox Escape via BaseException Subclasses
Summary An attacker who can supply expressions to asteval.Interpreter.eval can raise SystemExit, KeyboardInterrupt, GeneratorExit, or BaseException from inside the sandbox. These exceptions are subclasses of BaseException but not Exception, so they bypass the except Exception: safety net in both...
CVE-2026-59307
creationtimestamp| type| source ---|---|--- 2026-08-20 17:17:06+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjqsa5lyf2b...
CVE-2026-59324
creationtimestamp| type| source ---|---|--- 2026-08-20 17:17:06+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjqsa5lyf2b...
CVE-2026-76760
creationtimestamp| type| source ---|---|--- 2026-08-20 17:10:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtjqgwi5nb2a 2026-08-20 17:11:16+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117128943795081747...
CVE-2026-77022
creationtimestamp| type| source ---|---|--- 2026-08-20 17:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjqfnq7sa23 2026-08-20 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtai2zz52t...
py-web-vuln-scanner
No d...
MINI-6GV7-X2V7-8X99
Bulletin has no description...