CVE-2026-3832

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...

CVE-2026-3832

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...

MINI-264V-WMVC-QHFH

Bulletin has no description...

Exploit for CVE-2026-31431

Copy Fail - CVE-2026-31431 Detector and Mitigator !Bashhtt...

CVE-2026-39457

creationtimestamp| type| source ---|---|--- 2026-04-30 10:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493161945002037 2026-04-30 13:12:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkpowf5zx72k 2026-04-30 18:07:35+00:00| seen|...

Exploit for CVE-2026-31431

CVE Checker for Copy Fail CVE-2026-31431 Authors: Chris Fol...

CVE-2026-37504

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:12+00:00| seen| https://gist.github.com/sgInnora/1330e1a82caa79906eec55eeff2c99b9...

Prototype Pollution

Axios is vulnerable to Prototype Pollution. The vulnerability is due to use of the in operator in the mergeDirectKeys strategy for validateStatus, which traverses the prototype chain, allowing a polluted Object.prototype.validateStatus to override behavior and treat all HTTP responses as...

CVE-2026-26204

creationtimestamp| type| source ---|---|--- 2026-04-30 06:01:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116492132169709434...

PT-2026-36086

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations versions prior to 2.7.17 Description A payment bypass exists due to PHP type juggling, which occurs when a loose comparison is used between different data types, potentially leading to unexpected true results...

GnuTLS 安全漏洞

GnuTLS is an open-source, free security communication library developed by GnuTLS. GnuTLS has a security vulnerability that stems from a logical error in handling multi-record OCSP responses. This vulnerability could allow remote attackers to cause clients to incorrectly accept revoked server...

CVE-2026-6221

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Exploit for CVE-2026-41940

A companion tool for the watchTowr CVE-2026-41940 authentication...

MINI-2GPR-CW8Q-9R9P

Bulletin has no description...

GCVE-1-2026-0028

creationtimestamp| type| source ---|---|--- 2026-04-29 19:43:54+00:00| seen| https://social.circl.lu/users/cedric/statuses/116489704812221144...

CVE-2026-40552

creationtimestamp| type| source ---|---|--- 2026-04-29 16:42:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116488991780858575...

MINI-RC2Q-GCXH-GXFG

Bulletin has no description...

SUSE-SU-2026:1657-1 Security update for xen

This update for xen fixes the following issues: - CVE-2025-54505: floating point divider state sampling on AMD CPUs AMD-SN-7053 bsc1262428. - CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. - CVE-2026-23558: grant table v2 race in status page mapping bsc1262180...

MINI-C3RR-XXMJ-J9H8

Bulletin has no description...

CURL-CVE-2026-7009 OCSP stapling bypass with Apple SecTrust

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it fails to detect OCSP problems and instead wrongly consider the response as fine...