264148 matches found
OESA-2026-2731 mercurial security update
Mercurial is a free, distributed source control management tool. It efficiently handles projects of any size and offers an easy and intuitive interface. Security Fixes: A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects...
OESA-2026-2712 libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path line 241 was fixed with...
ROOT-APP-NPM-CVE-2026-8723 CVE-2026-8723 in @rootio/qs - Patched by Root
Root has patched CVE-2026-8723 in the @rootio/qs package for Root:npm. Multiple fixed versions available...
DEBIAN-CVE-2026-52943
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers pskbcarveinsideheader and pskbcarveinsidenonlinear both copy the old skbsharedinfo header into a new buffer via memcpy, which includes the destructorarg pointer uar...
CVE-2026-9612
creationtimestamp| type| source ---|---|--- 2026-06-24 10:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mozopgf35k23...
CVE-2026-52929
creationtimestamp| type| source ---|---|--- 2026-06-24 09:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozna5kmu52k 2026-07-06 06:24:39+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-21 01:56:21+00:00| seen...
CVE-2026-52940
creationtimestamp| type| source ---|---|--- 2026-06-24 08:38:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116804178176541056 2026-06-24 10:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqbszocp2x 2026-09-15 12:46:43+00:00| seen|...
CVE-2026-7761
creationtimestamp| type| source ---|---|--- 2026-06-24 08:29:44+00:00| seen| https://bsky.app/profile/suriq.io/post/3moziqqecbx2r 2026-06-24 13:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozzioqcpk2s 2026-06-26 10:15:09+00:00| seen|...
CVE-2026-12417
creationtimestamp| type| source ---|---|--- 2026-06-24 08:03:09+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mozhba5qeo2p 2026-06-24 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mozpiorzoj2l 2026-06-24 10:30:38+00:00| seen|...
ROOT-APP-NPM-CVE-2024-47764 CVE-2024-47764 in @rootio/cookie - Patched by Root
Root has patched CVE-2024-47764 in the @rootio/cookie package for Root:npm. Multiple fixed versions available...
CVE-2022-28209
creationtimestamp| type| source ---|---|--- 2026-06-24 07:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mozfsnt7gj24...
CVE-2026-52913
In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: stop OGMv2 on disabled interface When a batadvhardiface is disabled, its meshiface pointer is set to NULL. However, batadvvogmsendmeshif may still dispatch OGMs via batadvvogmqueueonif for interfaces that have sinc...
CVE-2026-52913 batman-adv: v: stop OGMv2 on disabled interface
In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: stop OGMv2 on disabled interface When a batadvhardiface is disabled, its meshiface pointer is set to NULL. However, batadvvogmsendmeshif may still dispatch OGMs via batadvvogmqueueonif for interfaces that have sinc...
GHSA-58FG-62FG-3FCJ
creationtimestamp| type| source ---|---|--- 2026-06-24 06:12:05+00:00| seen| https://gist.github.com/alon710/e0871f429bd0cd1c539be9054ab3870b...
Updated opensc packages fix security vulnerabilities
These packages fix security vulnerabilities: CVE-2026-10275, A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is...
EUVD-2026-38680
The Invoice Generator plugin for WordPress is vulnerable to Account Takeover via Password Reset in all versions up to, and including, 1.0.0. This is due to the pravelinvoicechangepassword function being registered as a nopriv AJAX handler with no nonce verification and no authorization check, and...
CVE-2026-10552 Blue Captcha <= 2.0.1 - Cross-Site Request Forgery via 'blcap_action' Parameter
The Blue Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.0.1. This is due to missing or incorrect nonce validation on the main admin panel blcapmainpage and on the Hall of Shame and Log subpages, which accept a 'blcapaction' / 'action'...
CVE-2026-9179
Summary: WP Forms Connector for WordPress (versions ≤ 1.8) is susceptible to unauthenticated SQL injection via the order parameter in the /wp-json/wp/v3/post/list endpoint. The root cause is insufficient escaping of $_GET['order'], with the value concatenated into the ORDER BY clause and executed...
Critical: Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Critical: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...