54722 matches found
CVE-2026-58015
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
PT-2026-57364
This update for pcr-oracle fixes the following issues Update to 0.6.3: Security issue: - integer underflow vulnerability in parse sbatlevel section bsc1265042. Non security issue: - Lockout Authorization error for libvirt-emulated TPM bsc1265871. Changes for pcr-oracle: + Relax TPM self-test...
The vulnerability of the alcorpci_sdmmc_drv_probe() function in the mmc/host/alcor.c driver module for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the alcorpcisdmmcdrvprobe function in the mmc/host/alcor.c driver module for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
RHEL 10 : git-lfs (RHSA-2026:30855)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:30855 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing...
CVE-2026-39872
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2026-13573
creationtimestamp| type| source ---|---|--- 2026-06-29 20:13:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphcg4qw3723...
BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
SummaryVarious issues in bbot's unarchive.py allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution RCE. ImpactA user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system...
PT-2026-53642
Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...
PT-2026-53428
Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack in version 1.15.0 and prior. A patch is available at commit 5fc84904f198de661d5b933fde756aa922bf09f1...
drm/amd/display: Bound VBIOS record-chain walk loops
...
CVE-2026-49869
creationtimestamp| type| source ---|---|--- 2026-06-26 21:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wpquuw42c 2026-06-26 22:48:16+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7znrg3ri2v 2026-06-27 17:01:02+00:00| seen|...
CVE-2026-45406
Technical details are not publicly available in the provided documents; monitor for updates.
DRUPAL-CONTRIB-2026-064
The Tealium iQ Tag Management module provides Drupal integration with Tealium iQ. tealiumiq stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an Object Injection vulnerability when the data are unserialized. This...
BELL-CVE-2026-53019
Bulletin has no description...
Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064
The Tealium iQ Tag Management module provides Drupal integration with Tealium iQ. tealiumiq stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an Object Injection vulnerability when the data are unserialized. This...
GO-2026-5403 Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos...
GO-2026-5425 Ironic Standalone Operator's controller modifies user-owned resources without consent in github.com/metal3-io/ironic-standalone-operator
Ironic Standalone Operator's controller modifies user-owned resources without consent in github.com/metal3-io/ironic-standalone-operator...
CVE-2025-71328 Flowise - Unverified Password Change via Account Settings
Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the account settings Security section without supplying the current password or any additional verification, as the application does not enforce a...