24909 matches found
CVE-2026-8126
creationtimestamp| type| source ---|---|--- 2026-05-08 05:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcy7t5y6s2v 2026-05-08 05:25:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlcyjsabed2f...
Linux Distros Unpatched Vulnerability : CVE-2026-43320
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix dsc eDP issue why Need to add function hook check before use CVE-2026-43320 Note that Nessus relies on the presence of the package as...
PT-2026-38949
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the adxl380 accelerometer driver where the interrupt handler reads FIFO entries in batches of N samples, based on the number of enabled scan elements. Because the sens...
Linux Distros Unpatched Vulnerability : CVE-2026-7261
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, when SoapServer is configured with SOAPPERSISTENCESESSION, th...
Linux Distros Unpatched Vulnerability : CVE-2026-8093
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these coul...
CVE-2026-41689
creationtimestamp| type| source ---|---|--- 2026-05-07 17:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbrfh5tqi2p...
MINI-GQ4X-M265-2QRP
Bulletin has no description...
CVE-2026-41688
Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname but passes the original hostname to cURL without CURLOPTRESOLVE pinning on 10 of 11 outbound HTTP endpoints, leaving a DNS...
USN-8253-1: Postfix vulnerability
Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use this issue to cause Postfix to crash, resulting in a denial of service...
USN-8253-1 postfix vulnerability
Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use this issue to cause Postfix to crash, resulting in a denial of service...
CVE-2026-41688
Wallos (versions ≤ 4.8.4) has an incomplete SSRF fix: the webhook URL is validated with gethostbyname(), but the original hostname is passed to curl without CURLOPT_RESOLVE pinning on 10 of 11 outbound HTTP endpoints, creating a DNS rebinding TOCTOU window. At publication, no patches are availabl...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 — "Copy Fail" Safe Detection Script A read-o...
BIT-APACHE-2026-29168 Apache HTTP Server: mod_md unrestricted OCSP response
Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...
Apache HTTP Server: mod_md unrestricted OCSP response
...
Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line
...
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
...
CVE-2026-43090
creationtimestamp| type| source ---|---|--- 2026-05-07 08:04:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116532251574592578...
GHSA-FRH3-6PV6-RC8J
creationtimestamp| type| source ---|---|--- 2026-05-07 06:10:29+00:00| seen| https://gist.github.com/alon710/560a262a37ded8b644e3892d54c879bb...