Linux Distros Unpatched Vulnerability : CVE-2026-45069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12,...

Webmin 跨站脚本漏洞

Webmin is a set of web-based system management tools for Unix-like operating systems, developed by the Webmin community. Versions of Webmin prior to 2.641 contained a cross-site scripting vulnerability. This vulnerability stemmed from the email template description field in the System and Server...

PT-2026-42557

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description The OAuth 2.0 Authorization-Code Handler fails to verify account status. This allows users who are suspended, banned, or terminated employees, specifically those with the uIsActive variable set ...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect inference of the zero-copy status during the cleanup phase before messages are...

Concrete CMS 安全漏洞

Concrete CMS is an open-source content management system designed for teams. Concrete CMS versions 9.5.0 and earlier have security vulnerabilities. These vulnerabilities stem from an oversight in the handling of OAuth 2.0 authorization codes, which bypasses account status checks. This could...

CVE-2026-7887: Improper Validation of Specified Type of Input

For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 suspended, banned, terminated employee can still authenticate via OAuth and receive valid API tokens. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score o...

CVE-2026-22678: Improper Neutralization of Input During Web Page Generation

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting...

CVE-2026-8399

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-40092

creationtimestamp| type| source ---|---|--- 2026-05-20 22:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcy7grcig2r...

CVE-2026-9118

creationtimestamp| type| source ---|---|--- 2026-05-20 20:30:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608796896901473 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...

CVE-2026-9111

creationtimestamp| type| source ---|---|--- 2026-05-20 20:03:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608690801419755 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...

GHSA-XVP4-PHQJ-CJR3

creationtimestamp| type| source ---|---|--- 2026-05-20 19:40:50+00:00| seen| https://gist.github.com/alon710/cb972f8f962d8bc96860b04de0a95070 2026-06-26 21:42:10+00:00| seen| https://gist.github.com/alon710/e9c21cf2a4b3d2c5f2db0a4799f8c878...

CLSA-2026-1779298645 postfix: Fix of CVE-2026-43964

CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...

CVE-2026-8467

creationtimestamp| type| source ---|---|--- 2026-05-20 11:02:01+00:00| published-proof-of-concept| https://github.com/phenixdigital/phoenixstorybook/security/advisories/GHSA-55hg-8qxv-qj4p 2026-05-20 15:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcaes4zid2e 2026-06-09...

CVE-2026-45063

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:14+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqocmwr72o 2026-07-14 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmxjszsha2t 2026-07-15 09:32:04+00:00| seen|...

CVE-2026-33278

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116606436980367840 2026-05-20 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmbp6fht2k22 2026-05-20 10:36:24+00:00| seen|...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mt76: fixed the race condition related to the “tx status” after the station removal operation. There is a small race condition where ongoing TX activity can cause an skb to be added to the status tracking IDR, even after that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/FPU: Fixed NULL dereference in avx512status. Problem: When CONFIGX86DEBUGFPU is enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This occurs because the AVX-512 timestamp code uses...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: “Revert ‘media: v4l2-ctrls: show all owned controls in logstatus’”. This change is reflected in commit 9801b5b28c6929139d6fceeee8d739cc67bb2739. This patch introduced a potential deadlock scenario: Wed May 8 10:02:06 2024 Possibl...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: The result size returned for the admin command completion has been corrected. The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the...