GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: pnpm-stage0, saf, opensearch-dashboards, prism, renovate, code-server, sqlpad, tileserver-gl, pulumi, kubeflow-pipelines, jupyter-base-notebook, lerna, py3-jupyterlab, npm, vitess, node-gyp, kubeflow-katib...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate, kibana, dbgate-fips, langfuse, librechat, jitsucom-jitsu, langfuse-fips, tileserver-gl-fips, prism, saf, dbgate, tileserver-gl...

CVE-2025-15577

creationtimestamp| type| source ---|---|--- 2026-02-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-02...

CVE-2026-20761

creationtimestamp| type| source ---|---|--- 2026-02-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-01 2026-02-20 17:08:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfclwgs42626...

CVE-2026-25329

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

CVE-2026-25324

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

GHSA-RP46-R563-JRC7 vulnerabilities

Vulnerabilities for packages: logstash, apache-hop-fips, celeborn, kafbat-ui-fips, akhq, wavefront-proxy, kafbat-ui, spark, pinot, druid, spark-fips, apache-hop, hadoop-fips...

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: logstash, apache-hop-fips, celeborn, kafbat-ui-fips, akhq, wavefront-proxy, kafbat-ui, spark, pinot, druid, spark-fips, apache-hop, hadoop-fips...

GHSA-27JP-WM6Q-GP25 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core, superset...

Valmet DNA Engineering Web Tools

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

Jinan USR IOT Technology Limited (PUSR) USR-W610

RISK EVALUATION Successful exploitation of these vulnerabilities could result in authentication being disabled, a denial-of-service condition, or an attacker stealing valid user credentials, including administrator credentials. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Linux Distros Unpatched Vulnerability : CVE-2026-2648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF fil...

PT-2026-20694

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

CVE-2026-25329: Missing Authorization

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

CVE-2026-25324: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

Linux Distros Unpatched Vulnerability : CVE-2026-2708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in libsoup/soup-message-headers.c...

Linux Distros Unpatched Vulnerability : CVE-2026-2659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file...

CVE-2026-2327 vulnerabilities

Vulnerabilities for packages: vitess, renovate...

CVE-2026-2661

A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be...

CVE-2026-23216

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount In iscsitdecconnusagecount, the function calls complete while holding the conn-connusagelock. As soon as complete is invoked, the waiter such as...