26972 matches found
EUVD-2026-31679
Szafir SDK returns a success status code from the cryptographic digital signature verification process i.e. /VerifyingTaskItem/Signature/VerificationResult/Result/@code == 0, "Positively verified" even when the trust status of the signer's certificate could not be established i.e...
CLSA-2026-1779292803 Fix CVE(s): CVE-2026-6735
SECURITY UPDATE: XSS within status endpoint in PHP-FPM - debian/patches/CVE-2026-6735.patch: XSS within status endpoint in PHP-FPM - CVE-2026-6735...
CVE-2026-48832
creationtimestamp| type| source ---|---|--- 2026-05-25 08:31:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634281312673423...
CVE-2026-9478
creationtimestamp| type| source ---|---|--- 2026-05-25 08:18:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634230129040025 2026-05-26 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmpytbaapv2d 2026-06-22 04:46:32+00:00| seen|...
CVE-2026-9482
creationtimestamp| type| source ---|---|--- 2026-05-25 05:09:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116633485426899323...
Open WebUI get_status() Bypass Access
The vulnerability of the getstatus function in the Open WebUI web interface is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
CVE-2026-9345
creationtimestamp| type| source ---|---|--- 2026-05-24 10:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116629086095233648 2026-05-25 14:45:14+00:00| seen| https://t.me/bdufstecru/3192...
CVE-2026-9346
creationtimestamp| type| source ---|---|--- 2026-05-24 03:02:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116627316698106126...
CVE-2026-9294
creationtimestamp| type| source ---|---|--- 2026-05-24 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626962874841105...
CVE-2026-9295
creationtimestamp| type| source ---|---|--- 2026-05-24 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626609621458470...
CVE-2024-9362
creationtimestamp| type| source ---|---|--- 2026-05-23 14:18:54+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9362.yaml...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fragment transmission helper function failing to propagate the SKBFLSHAREDFRAG bit. This coul...
CVE-2026-40596
creationtimestamp| type| source ---|---|--- 2026-05-22 22:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxb7f6tf2c...
CVE-2026-9251
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...
CVE-2026-9251
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...
EUVD-2026-31463
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...
CVE-2026-9251
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...
CVE-2026-9251
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...
CVE-2026-9251
A missing authorization vulnerability in the entry status management feature of Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow. By sending a crafted status change request, an attacker can gain unauthorized access to an e...