32380 matches found
Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)
imgproxy contains an issue caused by not blocking the 0.0.0.0 address even when IMGPROXYALLOWLOOPBACKSOURCEADDRESSES is set to false, letting local services be exposed, exploit requires network access. id: CVE-2025-24354 info: name: Imgproxy 3.27.2 - Server-Side Request Forgery SSRF author:...
Kaseya Virtual System Administrator - Open Redirect
Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2015-286...
CVE-2026-78183
creationtimestamp| type| source ---|---|--- 2026-08-23 20:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oxdo3eesu6f4 2026-08-23 20:39:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6rdunbaghb54q...
CVE-2026-78170
creationtimestamp| type| source ---|---|--- 2026-08-23 17:12:18+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117145936687083155...
CGA-7H42-WPFG-P865
Bulletin has no description...
CVE-2026-18027
creationtimestamp| type| source ---|---|--- 2026-08-23 00:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c76ori3me6slh...
CVE-2026-74705
creationtimestamp| type| source ---|---|--- 2026-08-22 21:34:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117141304282340075 2026-08-24 10:56:37+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtt5fkh2iv2k...
CVE-2026-74697
creationtimestamp| type| source ---|---|--- 2026-08-22 21:20:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117141250554107492...
CVE-2026-74695
creationtimestamp| type| source ---|---|--- 2026-08-22 21:06:51+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117141196709191876...
CVE-2019-2130
creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:07+00:00| seen| https://t.me/nuancesprognews/429 2026-08-23 00:00:12+00:00| published-proof-of-concept| https://t.me/nuancesprognews/429...
CVE-2019-5869
creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:06+00:00| seen| https://t.me/nuancesprognews/520 2026-08-23 00:00:13+00:00| seen| https://t.me/nuancesprognews/520...
CVE-2026-40179
creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:06+00:00| seen| https://t.me/GithubRedTeam/98742 2026-08-23 00:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/98742...
CVE-2026-59314
CVE-2026-59314...
DEBIAN-CVE-2026-74730
In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...
DEBIAN-CVE-2026-74727
In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequent...
DEBIAN-CVE-2026-74682
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urbpacks; u-buffersize = maxsize u-packets; if fmt-fmttype ==...
DEBIAN-CVE-2026-74671
In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...
DEBIAN-CVE-2026-74644
In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...
DEBIAN-CVE-2026-74597
In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip6ip6err ip6ip6err clones an outer IPv6 ICMP error skb, pulls it to the quoted inner IPv6 packet, and then passes the clone to icmpv6send. The clone still carries the outer packet's inet6skbparm in...
DEBIAN-CVE-2026-74603
In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...