CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-76021

creationtimestamp| type| source ---|---|--- 2026-08-20 21:36:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117129989464851347...

CVE-2026-74957

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

GHSA-7236-3392-C5C6 vulnerabilities

Vulnerabilities for packages: conftest, guac, podman, kubescape, kaniko, scorecard...

GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: conftest, guac, podman, kubescape, kaniko, scorecard...

CVE-2026-76017

creationtimestamp| type| source ---|---|--- 2026-08-20 20:50:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtk4pkehm722 2026-08-20 21:23:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117129937201421141 2026-08-21 08:45:25+00:00| seen|...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

USN-8543-2: Wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

CVE-2026-63385

creationtimestamp| type| source ---|---|--- 2026-08-20 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjzdqug2n2c 2026-08-20 20:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dpdykp2p 2026-08-22 06:10:03+00:00| seen|...

CVE-2026-66785

creationtimestamp| type| source ---|---|--- 2026-08-20 19:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjxo5keg325 2026-08-20 20:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fbjng72p 2026-08-20 21:00:45+00:00| seen|...

DEBIAN-CVE-2026-53585

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

DEBIAN-CVE-2026-15743

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

CVE-2026-53424

creationtimestamp| type| source ---|---|--- 2026-08-20 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjx4cg2wl2j 2026-08-20 20:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2d66bz72e...

CVE-2026-76641

creationtimestamp| type| source ---|---|--- 2026-08-20 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlayjy62r...

CVE-2026-73256

creationtimestamp| type| source ---|---|--- 2026-08-20 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjvyie3f52c 2026-08-20 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlhlixg2r 2026-08-20 20:08:25+00:00| seen|...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.hum1 aarch64, x8664...

CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...

DEBIAN-CVE-2026-73251

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

MAL-2026-14331 Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...

Malicious code in @pablo_clueless/sniffr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...