CVE-2026-42487

creationtimestamp| type| source ---|---|--- 2026-06-09 13:37:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucx6ujgc2i 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

CVE-2026-47899 Arbitrary File Read, Write, Rename, and Delete in Logseq

The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An attacker with JavaScript execution in the renderer e.g. via XSS or a malicious plugin, can read, write, or delete arbitrary files on the user's...

CVE-2026-49741

creationtimestamp| type| source ---|---|--- 2026-06-09 11:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu4ssm3pq2p 2026-06-10 03:07:26+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-typo3-cms 2026-06-10 13:15:36+00:00| seen|...

CVE-2026-40519

creationtimestamp| type| source ---|---|--- 2026-06-09 10:28:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116719675922395584 2026-07-16 19:00:18+00:00| seen| Telegram/Rc0b9T17FJVJElH6QZhazeHK5sevkoWVsl-YVplQMonaEk 2026-07-17 01:00:17+00:00| seen|...

CVE-2026-9279

creationtimestamp| type| source ---|---|--- 2026-06-09 06:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-9279...

CVE-2026-26236

creationtimestamp| type| source ---|---|--- 2026-06-09 06:02:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/116718621544406712 2026-06-17 12:00:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-18 03:38:08+00:00| seen|...

SUSE CVE-2026-46294

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer a...

PT-2026-47833

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status request extension. This triggers a double-free in the client's certificate verification pa...

UBUNTU-CVE-2026-42765

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can...

CVE-2026-42765

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can...

Linux Distros Unpatched Vulnerability : CVE-2026-11663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a...

OpenSSL 异常处理不当漏洞

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...

OpenSSL 资源管理错误漏洞

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...

UBUNTU-CVE-2026-35188

Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the statusrequest extension, triggering a double-free in the client's certificate verification path. Impact summary: Successful exploitation allows an attacker to corrupt heap memory via a...

GHSA-V4P8-MG3P-G94G

creationtimestamp| type| source ---|---|--- 2026-06-08 22:07:55+00:00| seen| https://infosec.exchange/users/secdb/statuses/116716025409567659 2026-07-06 12:56:58+00:00| seen| https://bsky.app/profile/alphahunt.io/post/3mpy5bjtqac2z 2026-07-06 12:56:58+00:00| seen|...

CVE-2026-46308

creationtimestamp| type| source ---|---|--- 2026-06-08 18:44:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116715940460595536...

CVE-2026-46481

OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TESTCONNECTION workflow for a Database Service and receive, in the HTTP 201 response of POST /api/v1/automations/workflows, both the cleartext database password in...

CVE-2026-46294

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer a...

CVE-2026-46294

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer a...

UBUNTU-CVE-2026-46294

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer a...