33854 matches found
CVE-2026-63803
In the Linux kernel, the following vulnerability has been resolved: hdlcppp: sync per-proto timers before freeing hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. That struct ppp is the hdlc-state allocation, which detachhdlcprotocol...
OESA-2026-2997 gzip security update
gzip is a single-file/stream lossless data compression utility, where the resulting compressed file generally has the suffix .gz. Security Fixes: GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...
CVE-2026-16211
creationtimestamp| type| source ---|---|--- 2026-07-19 08:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyd3tl5li2b...
CVE-2026-16200
creationtimestamp| type| source ---|---|--- 2026-07-19 04:16:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxwacwj3c2b...
PT-2026-61341
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the TCP implementation where a stale per-CPU tcp tw isn variable can leak, enabling Initial Sequence Number ISN prediction. The issue occurs because the system assumes t...
PT-2026-61479
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the idpf ptp init function where the read dev clk lock spinlock is initialized after the ptp schedule worker function has been called. This sequence allows the PTP...
PT-2026-61119
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HDLC PPP protocol implementation. The struct ppp allocated as hdlc-state registers timers for PPP control protocols LCP, IPCP, and IPV6CP using timer...
Exploit for CVE-2026-63030
wp2shell-scan A scanner and proof-of-concept toolkit for CVE-202...
Improper Authorization
MantisBT is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation of the user-supplied notetype parameter in the mcissueupdate SOAP endpoint, which allows an attacker to create unauthorized TIMETRACKING or REMINDER notes and, in some cases, inject arbitrary tim...
CVE-2024-58357
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time function that panics when unwrap is called on a None result from timestampopt. Authorized clients can repeatedly invoke rand::time to reliably trigger server panics and cause denial of service...
Malicious code in tinkoff-cloud-apis-internal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b85b858849bbf116303f2dc2740180df602dfc162f7ce7fa109e4c39b07ff The package installs a telemetry.pth file into site-packages via a custom install cmdclass; the.pth line imports telemetryinit, causing every...
CVE-2025-71396
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a default execution-time limit on embedded JavaScript scripting functions when the scripting capability is explicitly enabled via --allow-scripting or --allow-all. An authenticated attacker can submit long-running...
CVE-2024-58357 SurrealDB before 2.1.0 Denial of Service via rand::time()
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time function that panics when unwrap is called on a None result from timestampopt. Authorized clients can repeatedly invoke rand::time to reliably trigger server panics and cause denial of service...
CVE-2024-58357 SurrealDB before 2.1.0 Denial of Service via rand::time()
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time function that panics when unwrap is called on a None result from timestampopt. Authorized clients can repeatedly invoke rand::time to reliably trigger server panics and cause denial of service...
CVE-2024-58357
CVE-2024-58357 affects SurrealDB versions before 2.1.0. The vulnerability is an uncaught exception in the Rust rand::time() function that panics when unwrap is called on a None result from timestamp_opt. Authorized clients can repeatedly invoke rand::time() to trigger server panics, causing denia...
CVE-2024-58357
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time function that panics when unwrap is called on a None result from timestampopt. Authorized clients can repeatedly invoke rand::time to reliably trigger server panics and cause denial of service...
CVE-2024-58357 SurrealDB before 2.1.0 Denial of Service via rand::time()
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time function that panics when unwrap is called on a None result from timestampopt. Authorized clients can repeatedly invoke rand::time to reliably trigger server panics and cause denial of service...
CVE-2026-16158
creationtimestamp| type| source ---|---|--- 2026-07-18 12:37:14+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mqwbred7kk25 2026-07-18 14:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwgge5io22m 2026-07-19 02:22:24+00:00| seen|...