24698 matches found
CVE-2026-56820
Netty’s OcspClient vulnerability (CVE-2026-56820) allows a replay attack by not validating the CertificateID in OCSP responses. A forged or unrelated-but-signed OCSP response can be accepted for another certificate issued by the same CA, bypassing revocation checks. Affected versions: 4.2.0.Final...
CVE-2026-21953
creationtimestamp| type| source ---|---|--- 2026-07-21 21:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6sjn4xpd2a...
CVE-2026-60188
The CVE-2026-60188 entry affects Oracle MySQL components: MySQL Server (Replication) and MySQL Cluster. Affected versions are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability can be exploited by a high-privilege attacker with ...
CVE-2026-63903
A flaw was found in the Linux kernel's belkinsa USB serial driver. The driver's interrupt handling routine fails to validate the length of incoming status reports. This oversight allows a local attacker, by connecting a specially crafted USB device, to trigger an out-of-bounds read. The primary...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through changing a pull request's target branch without re-evaluating the official approval status on existing reviews. An attacker can bypass branch protection requirements and merge code into protected branches...
CVE-2026-47412
creationtimestamp| type| source ---|---|--- 2026-07-21 19:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kczhtvo2o...
httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...
MINI-HHVQ-M4F8-GJC5
Bulletin has no description...
SUSE CVE-2026-63903
In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...
SUSE CVE-2026-63927
In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usbhcdgivebackurb so save the urb-status ahead of time...
SUSE CVE-2026-63961
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and se...
CVE-2026-1617
creationtimestamp| type| source ---|---|--- 2026-07-21 11:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5puffh442v 2026-07-21 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr5r4jbqma2l 2026-07-21 13:21:30+00:00| seen|...
GHSA-FJ7V-R99M-22GQ
creationtimestamp| type| source ---|---|--- 2026-07-21 11:31:12+00:00| seen| https://gist.github.com/alon710/48f3deb1ca1eafb4018fbe6276da18c1...
GHSA-6R8X-57C9-28J4
creationtimestamp| type| source ---|---|--- 2026-07-21 10:31:21+00:00| seen| https://gist.github.com/alon710/8369d28698d5eaa2f4badffaca60e4b4...
GHSA-JJJ6-MW9F-P565
creationtimestamp| type| source ---|---|--- 2026-07-21 09:31:09+00:00| seen| https://gist.github.com/alon710/58614afe66c43fc333bb604ba1de657d...
CVE-2026-15812
creationtimestamp| type| source ---|---|--- 2026-07-21 05:57:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116956427872567771 2026-07-21 10:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5n4hn4dy2o...
CVE-2026-64172
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem, specifically affecting Hygon Family 18h processors. Due to an erratum, the hardware may incorrectly read a stale status bit during interrupt processing, preventing the virtual machine from exiting as expected. This...
PT-2026-63259
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...
PT-2026-63303
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...