123039 matches found
UBUNTU-CVE-2026-56434
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
UBUNTU-CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
UBUNTU-CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
samba security update
0:4.23.5-109 - Bump build number 0:4.23.5-108 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba...
Linux Distros Unpatched Vulnerability : CVE-2026-47737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress...
CVE-2026-48263
creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kzrgi2f...
CVE-2026-47999
creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524...
systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Summary On Linux, systeminformation's networkInterfaces is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive. While collecting per-interface DHCP state, the library reads /etc/network/interfaces and, for every source line it encounters, extracts the path...
GHSA-5XPP-75JX-M839 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Summary On Linux, systeminformation's networkInterfaces is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive. While collecting per-interface DHCP state, the library reads /etc/network/interfaces and, for every source line it encounters, extracts the path...
CVE-2026-52893
creationtimestamp| type| source ---|---|--- 2026-07-15 23:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w 2026-07-16 00:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i...
CVE-2026-55234
creationtimestamp| type| source ---|---|--- 2026-07-15 23:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7uvsqc26 2026-07-16 00:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpx7zhi4i2c 2026-07-16 17:01:16+00:00| seen|...
airbyte-source-jira (>=3.4.0.dev202412051939, <=3.4.0.dev202412052135), airbyte-source-klaviyo (>=2.11.0.dev202411212104, <=2.11.3.dev202412021626) +1 more potentially affected by CVE-2026-50271 via ddtrace (2.16.4)
ddtrace PYPI version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - airbyte-source-jira =3.4.0.dev202412051939, =2.11.0.dev202411212104, =5.14.0.dev202506051219, =5.14.0.dev202506111019 Source cves: CVE-2026-50271...
GHSA-398H-7F66-3H4P open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters
Summary A namespaced FeatureFlagSource or InProcessConfiguration resource can be referenced cross-namespace via the openfeature.dev/featureflagsource annotation using the documented NAMESPACE/NAME syntax. The operator resolves the referenced resource cluster-wide and materializes its contents env...
open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters
Summary A namespaced FeatureFlagSource or InProcessConfiguration resource can be referenced cross-namespace via the openfeature.dev/featureflagsource annotation using the documented NAMESPACE/NAME syntax. The operator resolves the referenced resource cluster-wide and materializes its contents env...
CVE-2026-53447
Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...
CVE-2026-52891
creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25 2026-07-16 00:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s 2026-07-18 04:18:04+00:00| seen|...
CVE-2026-40954
creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:34+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptyijcs2m...
CVE-2026-40955
creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:34+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptxriwj2v...