24898 matches found
GHSA-8RRQ-WCG8-CV5Q OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages
Summary OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attacker-controlled or sensitive values, this behavior can exfiltrate tokens, PII, or other confidential input into telemetry backends and inject untrusted text into downstream analysis...
OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages
Summary OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attacker-controlled or sensitive values, this behavior can exfiltrate tokens, PII, or other confidential input into telemetry backends and inject untrusted text into downstream analysis...
CLSA-2026-1779123668 Fix CVE(s): CVE-2026-6735
SECURITY UPDATE: XSS via unsanitized request URI in PHP-FPM status page - debian/patches/CVE-2026-6735.patch: escape requesturi with HTML entities in fpmstatushandlerequest for HTML/XML output formats, and fix querystring escape flags in sapi/fpm/fpm/fpmstatus.c - CVE-2026-6735...
CVE-2026-20685
creationtimestamp| type| source ---|---|--- 2026-05-18 16:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5dbepiyd2h 2026-08-10 06:52:29+00:00| seen| https://gist.github.com/HORKimhab/e7ac4ee161e8a39080c5fe6a49a833dd 2026-08-10 09:00:04+00:00| published-proof-of-concept|...
CVE-2026-6735
A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...
CVE-2026-8836
creationtimestamp| type| source ---|---|--- 2026-05-18 14:31:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116596059143630234 2026-05-18 20:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5o3g42b62n 2026-05-19 01:30:32+00:00| seen|...
GHSA-97R8-RF7Q-WMJW
creationtimestamp| type| source ---|---|--- 2026-05-18 14:10:50+00:00| seen| https://gist.github.com/alon710/98fbc08fd28e864acb5a0c94e605d960...
CLSA-2026-1779096347 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...
CLSA-2026-1779095130 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...
Security update for php8
This update for php8 fixes the following issues CVE-2025-14179: improper handling of NULL bytes by the PDO Firebird driver when preparing SQL queries can lead to SQL injection bsc1264778. CVE-2026-6722: use-after-free in SOAP using Apache map can lead to remote code execution bsc1264776...
Security update for php8
This update for php8 fixes the following issues CVE-2025-14179: improper handling of NULL bytes by the PDO Firebird driver when preparing SQL queries can lead to SQL injection bsc1264778. CVE-2026-6722: use-after-free in SOAP using Apache map can lead to remote code execution bsc1264776...
CVE-2026-8781
creationtimestamp| type| source ---|---|--- 2026-05-18 06:32:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4awjn5ds2h...
CVE-2026-8802
creationtimestamp| type| source ---|---|--- 2026-05-18 06:15:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116594110322861473 2026-05-18 13:01:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4wocxsjo2i...
CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...
CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...
PT-2026-41784
Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions prior to 0.9.0 Description OpenTelemetry eBPF Instrumentation exports raw Redis error text as the span status message. Because Redis error replies can contain sensitive values or attacker-controlled...
MINI-7J88-XJQ4-3V5X
Bulletin has no description...
GHSA-Q7RR-3CGH-J5R3
creationtimestamp| type| source ---|---|--- 2026-05-17 09:27:14+00:00| seen| https://gist.github.com/okilicarslan/c1a124840cde2bb66278de96a61a2a72...
CVE-2018-25337
creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25337 2026-05-17 15:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2o45oufr2p...
