262037 matches found
SUSE CVE-2026-50006
unknown...
SUSE CVE-2026-52809
Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives the account-activation lifetime, not conf.Auth.ResetPasswordCodeLives. The token lifetime is baked into the token itself at generation time and is re-extracted fr...
SUSE CVE-2026-52832
unknown...
SUSE CVE-2026-53508
oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-external-refs=false library: openapi3.Loader.IsExternalRefsAllowed = false when loading a spec from a git revision the...
SUSE CVE-2026-53715
unknown...
CVE-2026-28811
Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue...
CVE-2026-52680
Affected software: Apache Kyuubi REST batch multipart upload feature. Vulnerability: path traversal via client-supplied multipart filename used when creating temporary uploaded resources, enabling writing content outside the intended upload directory depending on filesystem permissions. Impact: p...
JLSEC-2026-905
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to sizet in svg, mvg and other coders recurring bugs of CVE-2022-32546...
CVE-2026-28812
CVE-2026-28812 affects Apache JSPWiki (up to version 2.12.3). The root cause is that the JSPWiki UserManager does not perform proper sanity checks on the user database at startup, enabling impersonation and potential privilege escalation. Affected component: UserManager; impact: authentication/au...
CVE-2026-16308
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded accumulation of multipart MIME part-header bytes...
OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check
Summary OliveTin's checkShellArgumentSafety function maintains a blocklist of argument types unsafe for Shell mode actions, but does not include regex:-prefixed types. Because regex: support was added independently via typeSafetyCheckRegex, any Shell mode action using a regex:-typed argument...
EUVD-2026-51141
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page...
CVE-2026-60074
Date::Manip for Perl up to v6.99 is affected by CVE-2026-60074. The bug arises because parse regexes use \d (matching Unicode decimal digits) for year/month/day, while downstream numeric checks only validate ranges, and Perl truncates non-ASCII digits when numifying. This can cause a parsed date ...
CVE-2026-17544
creationtimestamp| type| source ---|---|--- 2026-07-30 12:17:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ojh2ibweiexi 2026-07-31 12:40:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrwxyq3z2x23 2026-07-31 23:06:04+00:00| seen|...
CVE-2026-22621
creationtimestamp| type| source ---|---|--- 2026-07-30 12:05:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lh4qtswjtage...
CVE-2026-52680
creationtimestamp| type| source ---|---|--- 2026-07-30 11:47:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ffpd3ihundh7z 2026-07-31 19:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxndjqrcv2o 2026-08-04 11:00:05+00:00| published-proof-of-concept|...
BIT-PYTHON-2026-11940 tarfile extraction filter bypass allows escaping the destination directory
tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower...
CVE-2026-51239
creationtimestamp| type| source ---|---|--- 2026-07-30 10:28:14+00:00| seen| https://gist.github.com/programmervuln/83aa0ab12d6e698f6cdd44894988d019 2026-08-03 14:02:19+00:00| seen| https://gist.github.com/programmervuln/1de5553261befc79a74f17f3ab74930c...
