gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...

CVE-2026-22678

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting...

SUSE SLES15 Security Update : php8 (SUSE-SU-2026:2037-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2037-1 advisory. This update for php8 fixes the following issues - CVE-2025-14179: improper handling of NULL bytes by the PDO Firebird driver when...

CVE-2026-48851

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session...

CVE-2026-48851

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session...

GHSA-F9F8-RM49-7JV2

creationtimestamp| type| source ---|---|--- 2026-05-25 18:03:54+00:00| seen| https://bsky.app/profile/winsontang.com/post/3mmp2tsdeu62f...

EUVD-2026-31679

Szafir SDK returns a success status code from the cryptographic digital signature verification process i.e. /VerifyingTaskItem/Signature/VerificationResult/Result/@code == 0, "Positively verified" even when the trust status of the signer's certificate could not be established i.e...

CLSA-2026-1779292803 Fix CVE(s): CVE-2026-6735

SECURITY UPDATE: XSS within status endpoint in PHP-FPM - debian/patches/CVE-2026-6735.patch: XSS within status endpoint in PHP-FPM - CVE-2026-6735...

CVE-2026-48832

creationtimestamp| type| source ---|---|--- 2026-05-25 08:31:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634281312673423...

CVE-2026-9478

creationtimestamp| type| source ---|---|--- 2026-05-25 08:18:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634230129040025 2026-05-26 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmpytbaapv2d 2026-06-22 04:46:32+00:00| seen|...

CVE-2026-9482

creationtimestamp| type| source ---|---|--- 2026-05-25 05:09:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116633485426899323...

Open WebUI get_status() Bypass Access

The vulnerability of the getstatus function in the Open WebUI web interface is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

CVE-2026-9345

creationtimestamp| type| source ---|---|--- 2026-05-24 10:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116629086095233648 2026-05-25 14:45:14+00:00| seen| https://t.me/bdufstecru/3192...

CVE-2026-9346

creationtimestamp| type| source ---|---|--- 2026-05-24 03:02:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116627316698106126...

CVE-2026-9294

creationtimestamp| type| source ---|---|--- 2026-05-24 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626962874841105...

CVE-2026-9295

creationtimestamp| type| source ---|---|--- 2026-05-24 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626609621458470...

CVE-2024-9362

creationtimestamp| type| source ---|---|--- 2026-05-23 14:18:54+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9362.yaml...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fragment transmission helper function failing to propagate the SKBFLSHAREDFRAG bit. This coul...

CVE-2026-40596

creationtimestamp| type| source ---|---|--- 2026-05-22 22:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxb7f6tf2c...

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...