112269 matches found
CVE-2025-68110
creationtimestamp| type| source ---|---|--- 2026-05-21 18:06:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmez427w3f2u...
CVE-2026-48228 Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patientw.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the id and ticketid GET parameters directly into an HTML form action URL. Attackers ca...
CVE-2026-39531
creationtimestamp| type| source ---|---|--- 2026-05-21 17:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmevh22lgg2l...
RLSA-2026:13643 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: net/url:...
osbuild-composer security update
An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...
image-builder security update
An update is available for image-builder. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images...
osbuild-composer security update
An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...
CVE-2026-43496
creationtimestamp| type| source ---|---|--- 2026-05-21 16:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmetnfmrzt2k 2026-07-06 06:15:03+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 07:16:10+00:00| seen...
image-builder security update
An update is available for image-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images a...
image-builder security update
An update is available for image-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images a...
RLSA-2026:9044 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: net/url:...
RLSA-2026:13671 Important: image-builder security update
A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For more details about the security issues, including the impact, a CVSS score,...
osbuild-composer security update
An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...
CVE-2026-43497
creationtimestamp| type| source ---|---|--- 2026-05-21 16:17:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmesyzrc762t 2026-07-06 06:15:06+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 07:28:33+00:00| seen...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to insufficient validation in url.Parse [CVE-2026-25679]
Summary IBM Watson Speech Services Cartridge is vulnerable to insufficient validation in url.Parse, which may cause acceptance of some invalid URLs CVE-2026-25679. url.Parse is used in our speech utilities. This vulnerabilitiy has been addressed. Please read the details for remediation below...
MAL-2026-4405 Malicious code in @lokuma/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ea692229343873d930161e52d11be25bab87d4a00e942ceb18c1751f0f7586 The update subcommand of this CLI executes curl -fsSL | bash where the URL is...
Malicious code in ihubinternal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d05496a74a52542f8bf237430ae41377eb71e3710b41abfcc1f7b5cf3642885 The package exports a VelocityAuth function that, when called by integrating applications, sends end-user Solana wallet public keys, signed...
CVE-2026-45255
creationtimestamp| type| source ---|---|--- 2026-05-21 13:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeizefluf2k...
CVE-2026-5434
creationtimestamp| type| source ---|---|--- 2026-05-21 13:01:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmei3zkwn62t...
CVE-2026-7837
creationtimestamp| type| source ---|---|--- 2026-05-21 12:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmehnbdbf42t 2026-06-01 00:01:25+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmn3osk2o...