141958 matches found
Incorrect Implementation of Authentication Algorithm
Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm due to lossy ISO-8859-1 encoding in the digest hash computation. An attacker can log in as a user with a non-Latin-1 password by supplying a collision password that replaces each...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-55554
creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:26+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-wvh6-f5jh-8gw4...
CVE-2026-56722
creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:19+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-cx96-42px-69fm...
CVE-2026-56821
creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:12+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-g7hg-vrcf-mvmr 2026-07-29 02:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwjehar622 2026-07-29 12:15:13+00:00| seen|...
CVE-2026-56822
creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:10+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-wc96-39fc-566f 2026-07-29 02:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvzcxpus2j 2026-07-29 12:15:10+00:00| seen|...
CVE-2026-59920
creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:05+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-3g8r-4pfx-jmfh...
CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3
CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...
[SECURITY] [DSA 6395-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6395-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...
Improper Check for Certificate Revocation
Overview io.netty:netty-handler-ssl-ocsp is a Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. Affected versions of this package are vulnerable to Improper Check for Certificate Revocation in t...
K000162379: Linux Kernel vulnerabilities CVE-2026-23310, CVE-2026-23336, CVE-2026-23340, and CVE-2026-23343
Security Advisory Description CVE-2026-23310 In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmithashpolicy change when XDP is loaded bondoptionmodeset already rejects mode changes that would make a loaded XDP program incompatible via...
GO-2026-6020 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope in github.com/filebrowser/filebrowser
File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope in github.com/filebrowser/filebrowser...
GO-2026-6056 Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea
Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea...
GHSA-MHM7-754M-9P8W vulnerabilities
Vulnerabilities for packages: airbyte-server, apache-activemq-fips, infinispan, zookeeper-fips, cassandra, camunda-zeebe, flyway-fips, geoserver, gradle, akhq, hono, kafbat-ui-fips, airbyte-server-fips, apache-tika, zookeeper, nuxeo, ruby3.3-jrjackson, wavefront-proxy, confluent-kafka, flyway,...
GHSA-H95V-H523-3MW8 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: glow, crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, osv-scanner, crossplane-provider-azure-managedidentity, nuclei, crossplane-provider-aws-sns, crossplane-provider-azure-storage, glab, mods, dagger, crossplane-provider-aws-firehose,...
GHSA-MVH2-CRG5-V77C
creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-23 00:00:22+00:00| seen| https://t.me/bdufstecru/3334...
GHSA-M5FR-RV3H-XG2R
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...