54562 matches found
CVE-2026-51304
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51297
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-55214
creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x 2026-09-26 15:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mwgkx7rq4f25...
PT-2026-65059
An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...
PT-2026-65246
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...
PT-2026-65267
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description...
PT-2026-65373
Gitea: Unauthorized Access to Labels of Private Organizations in code.gitea.io/gitea...
CVE-2026-64311
The CVE concerns the Linux kernel: crypto: loongson - Remove broken and unused loongson-rng. The loongson-rng rng_alg reportedly has forward-security issues and a use-after-free bug linked to wait_for_completion_interruptible(), and the rng_alg framework is largely unused in-kernel. The advisory ...
Librest: weak random number generation in pkce implementation
...
CVE-2026-16796
creationtimestamp| type| source ---|---|--- 2026-07-25 02:43:25+00:00| seen| https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382...
EUVD-2026-41123
ImageMagick: Infinite Loop in connected-components when providing invalid arguments...
CVE-2026-55991 affecting package unbound for versions less than 1.25.2-1
CVE-2026-55991 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-54478 affecting package unbound for versions less than 1.25.2-1
CVE-2026-54478 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-60855
creationtimestamp| type| source ---|---|--- 2026-07-23 17:48:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
EUVD-2026-48339
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Versions prior to 3.31.0 ship with a default configuration that allows pod creators to inject arbitrary command-line arguments into the virtiofsd proce...
PYSEC-2026-3502 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard Summary PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and praisonai recipe serve dispatches to the deprecated Typer command in...
SUSE CVE-2026-63837
In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output enaphcgettimex64 is setting the output parameter regardless of whether enacomphcgettimestamp succeeded or failed. When enacomphcgettimestamp returns an error, the...
PT-2026-63610
Modals gallery paths could enumerate unintended directories...
Eclipse Jetty: HTTP Authority/Host mismatch
Summary Jetty currently accepts HTTP/2 and HTTP/3 requests where the regular Host header and the pseudo-header :authority do not match. As a result, the same request can carry two different host identities through Jetty: - logic based on HttpURI / Request.getServerNamerequest uses :authority -...