AZL-105410 CVE-2026-94636 affecting package thrift 0.24.0-1

Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

AlmaLinux 9.2 [TuxCare] Security Update: squid (ALMALINUX9.2:CLSA-2024:1735126310)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1735126310 advisory. - Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prio...

Improper Validation of Specified Type of Input

Overview org.webjars.npm:ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via isHostInSubnet and isInSubnet which delegates to it, which compares masked...

Improper Validation of Specified Type of Input

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via isHostInSubnet and isInSubnet which delegates to it, which compares masked binary strings...

Improper Validation of Specified Quantity in Input

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are...

Improper Validation of Specified Quantity in Input

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the addressparser module's handling of quoted local-part addresses. When an address of the form...

CVE-2026-12974: Improper Validation of Specified Quantity in Input

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...

CVE-2026-89420 Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free

Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...

CVE-2026-89420: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the aresdnsparse function. An attacker can cause excessive heap memory allocation and degrade or deny name resolution services by sending specially crafted DNS responses with...

CVE-2026-70748

creationtimestamp| type| source ---|---|--- 2026-09-15 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlkinfysa2g 2026-09-15 22:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvln6hnuci2b 2026-09-16 12:05:07+00:00| seen|...

CVE-2026-12518

creationtimestamp| type| source ---|---|--- 2026-09-15 07:00:06+00:00| seen| https://t.me/RussianOSINT/7901 2026-09-15 13:30:07+00:00| seen| https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvkqachepv2u 2026-09-16 00:00:32+00:00| seen| https://t.me/RussianOSINT/7901...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts. The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for certain usbbulkmsg calls. Since the user can specif...

CVE-2026-76442: Improper Validation of Specified Quantity in Input

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-89636

creationtimestamp| type| source ---|---|--- 2026-09-13 10:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfdkvcuhu2y 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2022-50944

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:50+00:00| seen| https://t.me/shimiscyberworld/1340...

CVE-2026-18061

creationtimestamp| type| source ---|---|--- 2026-09-11 18:02:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2o3loai2phvut...

CVE-2026-75719

creationtimestamp| type| source ---|---|--- 2026-09-11 05:09:34+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv7sfkcyzf26...

Improper Validation of Specified Type of Input

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the meta object in calendar events, which is stored without validation. An attacker can disrupt calendar alert functionality for all users by submitting a...

CVE-2026-80921

creationtimestamp| type| source ---|---|--- 2026-09-10 15:40:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117247496893618248 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...