143257 matches found
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat i...
RHSA-2026:44694 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:44522 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:44438 Red Hat Security Advisory: compat-openssl11 security update
Bulletin has no description...
RHSA-2026:44480 Red Hat Security Advisory: compat-openssl10 security update
Bulletin has no description...
PYSEC-2026-3447
creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...
GHSA-4MP9-239F-G9HG vulnerabilities
Vulnerabilities for packages: hono, flyway, logstash-fips, seata, opensearch-fips, spark-fips, airbyte-server, apache-activemq-artemis, reposilite, infinispan, tez, traccar-fips, kafbat-ui-fips, wavefront-proxy, apache-pulsar-fips, s3proxy, akhq, pinot, spark-kubernetes-operator, kafka-bridge-fip...
GHSA-6CQP-G7GG-8HR5 vulnerabilities
Vulnerabilities for packages: hono, flyway, logstash-fips, seata, opensearch-fips, spark-fips, airbyte-server, apache-activemq-artemis, reposilite, infinispan, tez, traccar-fips, kafbat-ui-fips, wavefront-proxy, apache-pulsar-fips, s3proxy, akhq, pinot, spark-kubernetes-operator, kafka-bridge-fip...
GHSA-Q4F6-JM68-57WW vulnerabilities
Vulnerabilities for packages: hono, flyway, logstash-fips, seata, opensearch-fips, spark-fips, airbyte-server, apache-activemq-artemis, reposilite, infinispan, tez, traccar-fips, kafbat-ui-fips, wavefront-proxy, apache-pulsar-fips, s3proxy, akhq, pinot, spark-kubernetes-operator, kafka-bridge-fip...
GHSA-WC96-39FC-566F vulnerabilities
Vulnerabilities for packages: thingsboard, tez, cassandra, management-api-for-apache-cassandra-5.0...
GHSA-G7HG-VRCF-MVMR vulnerabilities
Vulnerabilities for packages: thingsboard, tez, cassandra, management-api-for-apache-cassandra-5.0...
CVE-2026-13077
creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66140
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...
GHSA-35RM-7J9C-2F7M vulnerabilities
Vulnerabilities for packages: zed...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, homepage, langfuse, keep-fips, keep, peerdb-ui, langfuse-fips...
GHSA-4C39-4CCG-62R3 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, homepage, langfuse, keep-fips, keep, peerdb-ui, langfuse-fips...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, homepage, langfuse, keep-fips, keep, peerdb-ui, langfuse-fips...