Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the stbttbufget8 function. An attacker can cause a denial of service by supplying a specially crafted TrueType Font file that triggers an out-of-bounds read during processing. Workaround This vulnerability can be...

BIT-GRAFANA-2026-27877 Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-4370

creationtimestamp| type| source ---|---|--- 2026-04-01 08:33:22+00:00| published-proof-of-concept| https://github.com/juju/juju/security/advisories/GHSA-gvrj-cjch-728p 2026-04-01 09:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116328630451101827 2026-04-01 09:00:36+00:00| see...

CVE-2026-30282

creationtimestamp| type| source ---|---|--- 2026-03-31 18:34:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miesvzalqn2t 2026-03-31 18:58:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieubjuhm622 2026-04-07 23:00:14+00:00| seen|...

CVE-2026-32725

creationtimestamp| type| source ---|---|--- 2026-03-31 18:31:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miesptmlej2s 2026-03-31 18:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieu45uy4c2g 2026-03-31 19:20:34+00:00| published-proof-of-concept|...

CVE-2026-5286

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116327922216539438 2026-04-01 06:00:29+00:00| seen|...

CVE-2026-21631

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 12:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migoed6tnw2q 2026-04-01 12:20:17+00:00| seen|...

CVE-2026-23898

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116328983974110242 2026-04-01 10:30:32+00:00| seen|...

CVE-2026-34503

creationtimestamp| type| source ---|---|--- 2026-03-31 14:52:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miegiu7wq72i 2026-03-31 15:32:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mieiq3tu6t2c 2026-03-31 15:33:11+00:00| seen|...

CVE-2026-32920

creationtimestamp| type| source ---|---|--- 2026-03-31 12:51:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie7pzf3zw2h 2026-03-31 13:19:01+00:00| seen| Telegram/jSTFa01DEWFRhQKHtf4fP3tqxxyDE1Jfuh4yALHVDvczs38 2026-03-31 13:51:47+00:00| seen|...

CVE-2026-32982

creationtimestamp| type| source ---|---|--- 2026-03-31 12:28:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6iajyix2s 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 14:06:48+00:00| seen|...

CVE-2026-34509

creationtimestamp| type| source ---|---|--- 2026-03-31 12:27:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6fivqkw25 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 13:19:41+00:00| seen|...

CVE-2026-4317

creationtimestamp| type| source ---|---|--- 2026-03-31 10:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3midxuhnjb42i 2026-03-31 10:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midzgvh7s62o 2026-03-31 11:17:48+00:00| seen|...

SUSE CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2025-32957

creationtimestamp| type| source ---|---|--- 2026-03-31 01:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micyy2rkto2j 2026-03-31 01:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micz5zuvuo2h 2026-03-31 03:10:50+00:00| seen|...

GHSA-Q6JJ-R49P-94FH AVideo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification

Summary The getapivideofile and getapivideo API endpoints in AVideo return full video playback sources direct MP4 URLs, HLS manifests for password-protected videos without verifying the video password. While the normal web playback flow enforces password checks via the CustomizeUser::getModeYouTu...

AVideo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification

Summary The getapivideofile and getapivideo API endpoints in AVideo return full video playback sources direct MP4 URLs, HLS manifests for password-protected videos without verifying the video password. While the normal web playback flow enforces password checks via the CustomizeUser::getModeYouTu...

RHSA-2026:3402

creationtimestamp| type| source ---|---|--- 2026-03-30 14:35:01+00:00| seen| https://gist.github.com/fao89/0ef4daafb58f204bb3f4b9361f75d68c 2026-03-30 14:50:35+00:00| seen| https://gist.github.com/fao89/ce009677a07abdc70b85a5ec1d9a9b85...

CERTFR-2026-ACT-013

creationtimestamp| type| source ---|---|--- 2026-03-30 14:17:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mibu44vvge2o 2026-03-30 14:18:00+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116318553525388674 2026-03-31 05:40:09+00:00| seen|...

CVE-2026-4415

creationtimestamp| type| source ---|---|--- 2026-03-30 07:21:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html 2026-03-30 08:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mib7z567dw2t 2026-03-30 09:00:30+00:00| seen|...