GHSA-8X8G-6RV5-MGG2

creationtimestamp| type| source ---|---|--- 2026-04-20 17:20:51+00:00| seen| Telegram/GfeUhnyJYShCjvs7rm1XQAQJnKqowYjnl2h2DVxLAV4-eNA...

CVE-2025-14732

creationtimestamp| type| source ---|---|--- 2026-04-20 16:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjwvof7dku2h...

CVE-2026-24468 OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API

OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.11.0 and prior to version 2.0.13, the /api/reset endpoint behaves differently depending on whether the supplied username exists in the syste...

K000160908: Linux kernel vulnerability CVE-2019-15902

Security Advisory Description A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in...

CVE-2026-34232

A flaw was found in Firebird, an open-source relational database management system. The xdrstatusvector function, responsible for decoding server responses, does not properly handle a specific data type iscargcstring within an opresponse packet. An unauthenticated attacker can exploit this...

CVE-2026-6628

creationtimestamp| type| source ---|---|--- 2026-04-20 12:30:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwhuxxas62e...

CVE-2026-6584

creationtimestamp| type| source ---|---|--- 2026-04-20 04:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvlrd4sob2k...

XiangShan 安全漏洞

XiangShan is an open-source high-performance RISC-V processor project developed by XiangShan in China. There is a security vulnerability in XiangShan, which stems from improper handling of exceptional conditions by the CSR subsystem. This vulnerability may allow local attackers to cause...

CVE-2026-29647

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

CVE-2026-29643

The XiangShan open-source high-performance RISC-V processor is vulnerable due to an improper exceptional-condition handling flaw in its CSR subsystem (NewCSR) , specifically identified in commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28). Certain sequences of CSR operations targeting n...

CVE-2026-29642

The XiangShan RISC-V processor project (specifically versions involving commit aecf601e803bfd2371667a3fb60bfcd83c333027 , dated 2024-11-19) is vulnerable to a flaw where a local attacker with privileged CSR execution capabilities can perform crafted reads or writes to menvcfg (e.g., using csrrs i...

CVE-2026-29647

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

PT-2026-33855

XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...

CVE-2026-29642

A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...

CVE-2026-29643

XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...

PT-2026-33840

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

CVE-2026-6577

creationtimestamp| type| source ---|---|--- 2026-04-19 21:15:12+00:00| published-proof-of-concept| Telegram/ufJM6PGgYCZvMYI9YNw2SbGN8uW-GB10f-lGfe46lAW4 2026-04-19 21:29:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjuvjsryko2e 2026-04-19 23:53:28+00:00| seen|...

GHSA-W8J3-QVC3-H56F

creationtimestamp| type| source ---|---|--- 2026-04-19 07:22:56+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjtgake2o22p...

CVE-2026-2505

creationtimestamp| type| source ---|---|--- 2026-04-19 00:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116428462595537812 2026-04-19 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116429136061434312 2026-04-19 03:00:31+00:00| seen|...

PT-2026-33635

Apache Struts CVE-2026-6056 has been rejected, indicating no current security threat. This highlights the importance of verifying CVE statuses before panic. NerdieNews CyberSecurity InfoSec Ransomware Malware https://t.co/uHuPsnGEPa...