123007 matches found
GHSA-XWWR-4H3P-R22C
creationtimestamp| type| source ---|---|--- 2026-09-08 01:01:46+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muxt5p4z2r2x...
CLEANSTART-2026-LL86841 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the opentelemetry-collector package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See...
NETworkManager v2026.9.7.0
NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...
EUVD-2026-72578
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the...
CVE-2026-86439
creationtimestamp| type| source ---|---|--- 2026-09-08 00:04:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpx2ca5423 2026-09-08 13:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muz3c5rmgl24 2026-09-25 20:30:32+00:00| seen|...
CVE-2020-15367
creationtimestamp| type| source ---|---|--- 2026-09-08 00:00:07+00:00| seen| Telegram/O8mSpyNy7kB1kY1fK9CD34PkE3MaZvnjKkC8Ugpy2sCZKZY 2026-09-09 00:00:48+00:00| published-proof-of-concept| Telegram/O8mSpyNy7kB1kY1fK9CD34PkE3MaZvnjKkC8Ugpy2sCZKZY...
CVE-2026-47680: Relative Path Traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
PT-2026-109389
Уязвимость редактора исходного кода Visual Studio Code связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...
PT-2026-89659
Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти ограничения безопасности...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3345)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...
APSB26-138 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could result in security feature bypass and privilege escalation. Adobe is not aware of any exploits in the wild for any...
Online Store Application Code Execution
The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code...
CVE-2026-86437
creationtimestamp| type| source ---|---|--- 2026-09-07 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7j7akxumrsw6e...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-0865 DESCRIPTION: User-controlled header names and values containing newlines can allow injecting HTTP headers. CWE:CWE-74: Improper Neutralization of...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-27459 DESCRIPTION: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-42960 DESCRIPTION: NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-48713 DESCRIPTION: Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-81551 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage...
CVE-2026-86494
creationtimestamp| type| source ---|---|--- 2026-09-07 18:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3ob5m3e2v 2026-09-07 18:56:55+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mux6rbojem2p...