264167 matches found
CVE-2024-38487
api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions...
Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU
Summary Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU plus CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, and CVE-2026-22007 Vulnerability Details CVEID:CVE-2026-22016...
CVE-2026-42089 yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
CVE-2026-42089 yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
CVE-2026-53776 Perry < 0.5.1166 JWT Expiration Bypass via verify_decode
Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validateexp = false in the verifydecode helper within the stdlib JWT verification path. Attackers in possession of a previously issued...
CVE-2026-9006
creationtimestamp| type| source ---|---|--- 2026-06-16 15:00:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mog2tg6zxc24 2026-06-16 15:10:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mog3fas22c2h 2026-07-02 08:27:48+00:00| seen|...
GHSA-P4GQ-832X-FM9V Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
Summary nltk.data.load in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments when using the nltk: URL scheme. The unsafe-path regex check is performed before url2pathname decodes the %xx sequences a classic decode-after-check / TOCTOU-style flaw, allowing ...
CVE-2026-54421
A flaw was found in OpenStack Ironic. When an authorized user applies a PATCH operation to update volume properties, the system can inadvertently expose sensitive information, such as iSCSI credentials. This information disclosure vulnerability allows an attacker to gain access to credentials tha...
Improperly Implemented Security Check for Standard
Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard in the Lambda@Edge adapter that truncates repeated request headers. An attacker can bypass access restrictions or affect auditing...
CVE-2026-3276 vulnerabilities
Vulnerabilities for packages: python...
GHSA-993G-76C3-P5M4 vulnerabilities
Vulnerabilities for packages: netbox, openstack-horizon-2025.1-fips, datadog-agent, openstack-placement-2025.1, netbox-fips, openstack-glance-2025.1, openstack-glance-2025.2, openstack-keystone-2026.1, openstack-glance-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2025.2,...
GHSA-QQ7Q-F996-8XMG vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12023 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3276 vulnerabilities
Vulnerabilities for packages: python...
GHSA-X86P-J2WX-WVVX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-5X54-5CG6-5439 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H97P-MRQ3-8JWJ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12314
creationtimestamp| type| source ---|---|--- 2026-06-16 14:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofyezrli32v 2026-06-17 03:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohd4ahicu27 2026-06-17 20:00:00+00:00| seen|...