41479 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-62641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size. CVE-2026-62641...
Linux Distros Unpatched Vulnerability : CVE-2026-15712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer over-read vulnerability was discovered in libsoup's versions: libsoup 3.0 to 3.7.0 HTTP/2 connection tracking framework. When the library processe...
MAL-2026-10650 Malicious code in install-skia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b665b508eeae9e0e619ed7b68e3a43248cd81d67d40a0516bbd62981ddb2359f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
CVE-2026-46628
Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. This issue is fixed in version 3.26.0...
CVE-2026-45045 vulnerabilities
Vulnerabilities for packages: gatus...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-45133
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...
CVE-2026-50317
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-45756
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335
CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...
2026-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5099538)
2026-07 Cumulative Update for Windows Server 2019 for x64-based Systems KB5099538...
2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5099538)
2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5099538...
2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5099539)
2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5099539...