32750 matches found
SUSE CVE-2026-63837
In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output enaphcgettimex64 is setting the output parameter regardless of whether enacomphcgettimestamp succeeded or failed. When enacomphcgettimestamp returns an error, the...
CVE-2026-57370: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...
PT-2026-63586
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...
PT-2026-64019
Name of the Vulnerable Software and Affected Versions Logto affected versions not specified Description Logto fails to validate the SAML element. This allows attackers to remove time and audience restrictions, which enables the indefinite replay of assertions. SAML Security Assertion Markup...
PT-2026-63612
Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable...
The vulnerability of the ocxl_file_register_afu() function in the drivers/misc/ocxl/file.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the ocxlfileregisterafu function in the drivers/misc/ocxl/file.c file of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-65016
creationtimestamp| type| source ---|---|--- 2026-07-22 22:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbfd46p2i2j 2026-07-27 19:18:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmfzh6ff2o...
CVE-2025-60835
creationtimestamp| type| source ---|---|--- 2026-07-22 21:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbctjcuje2q...
GO-2026-6057 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface in code.gitea.io/gitea
Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth X-Gitea-OTP surface in code.gitea.io/gitea...
CVE-2026-61207
creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sutips2j 2026-07-23 18:17:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
MAL-2026-10993 Malicious code in torch-musa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dc7f99306afb7d31dab4c2ca32f2feb984bcdc505cf1dc6c3ee736cd21f9bcc9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
GHSA-G3R5-9H93-4J2C n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...
CVE-2026-13187
creationtimestamp| type| source ---|---|--- 2026-07-22 17:18:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrategwpze2g...
CVE-2026-64834
FFmpeg 0.6.3–8.1.2 contains an infinite loop DoS in the RTP/ASF demuxer (libavformat/rtpdec_asf.c). The rtp_asf_fix_header function does not validate a minimum chunksize when iterating ASF objects, so when a chunksize is smaller than the 24-byte ASF header, the loop pointer fails to advance, caus...
CVE-2026-64834 FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...
CVE-2026-11605
creationtimestamp| type| source ---|---|--- 2026-07-22 16:47:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u 2026-07-22 19:01:40+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mraz4gyvek2o...
CVE-2026-59678
creationtimestamp| type| source ---|---|--- 2026-07-22 16:26:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mraqhvveol26...
CERTFR-2026-ALE-008
creationtimestamp| type| source ---|---|--- 2026-07-22 15:03:13+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116964235036563174...