9051 matches found
hubzoid (>=0.7.15, <=0.9.6), openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-87999 via open-webui (>=0.6.0, <=0.11.0)
open-webui PYPI version =0.6.0, =0.7.15, =0.9.6 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-87999 Source advisory: MEND:CVE-2026-87999...
RLSA-2026:64809 Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...
SUSE CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
PrivAudit: A Dual-Lens Auditing Framework for Website Privacy Practices under the CCPA
Five years after the enforcement of the California Consumer Privacy Act CCPA, understanding how website privacy practices evolve at scale in response to regulation remains a key challenge for both researchers and regulators. Prior work and regulatory efforts have focused on manual and case-specif...
AlmaLinux 9 : expat (ALSA-2026:64812)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64812 advisory. expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via...
CVE-2026-80087
creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:32+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:26+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:56:42+00:00|...
CVE-2026-62437
A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...
CVE-2026-67643
creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:01:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:42+00:00| seen|...
CVE-2026-69768
creationtimestamp| type| source ---|---|--- 2026-09-08 20:11:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztf7v6232p 2026-09-08 20:19:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:08:13+00:00| seen|...
CVE-2026-82061
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-82061 Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
EUVD-2026-72948
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-82061 Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-82061
CVE-2026-82061 is a use-after-free vulnerability in MongoDB Server 's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, resulting in a server process crash (denial of ser...
CVE-2026-82061
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-82061 Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
DEBIAN-CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
ALPINE-CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
EUVD-2026-72719
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...