262546 matches found
ROOT-APP-NPM-CVE-2026-2739 CVE-2026-2739 in @rootio/bn.js - Patched by Root
Root has patched CVE-2026-2739 in the @rootio/bn.js package for Root:npm. Multiple fixed versions available...
CVE-2026-11625
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random streams will be produced...
PYSEC-2026-238
The Apache Airflow FTP provider's FTPSHook.getconn created an ftplib.FTPTLS connection but never called protp, so although the control channel was TLS-protected the data channel was transmitted in cleartext. Any deployment using FTPSHook or FTPSFileTransmitOperator to move files over FTPS exposed...
ROOT-APP-MAVEN-CVE-2024-47561 CVE-2024-47561 in io.root.org.apache.avro:avro - Patched by Root
Root has patched CVE-2024-47561 in the io.root.org.apache.avro:avro package for Root:Maven. Multiple fixed versions available...
CVE-2026-1869
The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing validation checks in the confirmpayment function in all...
CVE-2026-56005
creationtimestamp| type| source ---|---|--- 2026-06-26 07:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp6fj73y2g2w...
BELL-CVE-2026-53122
Bulletin has no description...
BELL-CVE-2026-53034
Bulletin has no description...
BELL-CVE-2026-53041
Bulletin has no description...
BELL-CVE-2026-52951
Bulletin has no description...
CVE-2026-50739
creationtimestamp| type| source ---|---|--- 2026-06-26 02:51:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5wr5k3yo2z...
CVE-2026-48618
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...
GHSA-5JMJ-H7XM-6Q6V vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, conductor, spdx-tools-java, kafka-bridge-fips, ontop-fips, s3proxy, akhq, apache-activemq, cassandra-reaper, nacos, knative-kafka-broker-fips, kayenta-fips, knative-kafka-broker, kafka-bridge, infinispan, nacos-docker, kayenta...
UBUNTU-CVE-2026-48934
A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
CVE-2026-48615
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...
UBUNTU-CVE-2026-48930
A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
SUSE CVE-2026-53165
In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio-mapping deref during error reporting When a buffered read fails, iomapfinishfolioread reports the error with fserrorreportiofolio-mapping-host, .... This is called after ifs-readbytespending has...
SUSE CVE-2026-53209
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...
EUVD-2026-39598
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access...