Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)

imgproxy contains an issue caused by not blocking the 0.0.0.0 address even when IMGPROXYALLOWLOOPBACKSOURCEADDRESSES is set to false, letting local services be exposed, exploit requires network access. id: CVE-2025-24354 info: name: Imgproxy 3.27.2 - Server-Side Request Forgery SSRF author:...

Kaseya Virtual System Administrator - Open Redirect

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2015-286...

CVE-2026-78183

creationtimestamp| type| source ---|---|--- 2026-08-23 20:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oxdo3eesu6f4 2026-08-23 20:39:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6rdunbaghb54q...

CVE-2026-78170

creationtimestamp| type| source ---|---|--- 2026-08-23 17:12:18+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117145936687083155...

CGA-7H42-WPFG-P865

Bulletin has no description...

CVE-2026-18027

creationtimestamp| type| source ---|---|--- 2026-08-23 00:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c76ori3me6slh...

CVE-2026-74705

creationtimestamp| type| source ---|---|--- 2026-08-22 21:34:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117141304282340075 2026-08-24 10:56:37+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtt5fkh2iv2k...

CVE-2026-74697

creationtimestamp| type| source ---|---|--- 2026-08-22 21:20:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117141250554107492...

CVE-2026-74695

creationtimestamp| type| source ---|---|--- 2026-08-22 21:06:51+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117141196709191876...

CVE-2019-2130

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:07+00:00| seen| https://t.me/nuancesprognews/429 2026-08-23 00:00:12+00:00| published-proof-of-concept| https://t.me/nuancesprognews/429...

CVE-2019-5869

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:06+00:00| seen| https://t.me/nuancesprognews/520 2026-08-23 00:00:13+00:00| seen| https://t.me/nuancesprognews/520...

CVE-2026-40179

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:06+00:00| seen| https://t.me/GithubRedTeam/98742 2026-08-23 00:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/98742...

CVE-2026-59314

CVE-2026-59314...

DEBIAN-CVE-2026-74730

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...

DEBIAN-CVE-2026-74727

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequent...

DEBIAN-CVE-2026-74682

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urbpacks; u-buffersize = maxsize u-packets; if fmt-fmttype ==...

DEBIAN-CVE-2026-74671

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...

DEBIAN-CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

DEBIAN-CVE-2026-74597

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip6ip6err ip6ip6err clones an outer IPv6 ICMP error skb, pulls it to the quoted inner IPv6 packet, and then passes the clone to icmpv6send. The clone still carries the outer packet's inet6skbparm in...

DEBIAN-CVE-2026-74603

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...