112834 matches found
EUVD-2026-20576
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's PO...
CVE-2026-35400 LORIS incorrectly trusts user input in publication module
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's PO...
CVE-2026-4837
creationtimestamp| type| source ---|---|--- 2026-04-08 18:24:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyw3danrk2i 2026-04-13 12:10:45+00:00| seen| https://bsky.app/profile/vitobotta.com/post/3mjetjofdtk2x 2026-04-13 12:10:45+00:00| seen|...
CVE-2026-39406
creationtimestamp| type| source ---|---|--- 2026-04-08 18:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyvx6stlw24...
CVE-2026-39408
creationtimestamp| type| source ---|---|--- 2026-04-08 18:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyvtdsplx22 2026-04-10 23:26:51+00:00| seen| Telegram/VmPzW9vK7p7Zve81sAsPaRrRR2EIHLwag0ULU7f22817b0...
CVE-2026-5912
creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 01:48:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372228765427357 2026-04-09 17:41:59+00:00| seen|...
CVE-2026-2377 Mirror-registry: quay: quay: server-side request forgery via log export functionality
A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as...
CVE-2026-2509
creationtimestamp| type| source ---|---|--- 2026-04-08 14:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiurtpk42o 2026-05-04 21:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml2mqksokp2i...
Important: Red Hat Security Advisory: grafana security update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
CVE-2026-3396
creationtimestamp| type| source ---|---|--- 2026-04-08 13:16:11+00:00| seen| Telegram/w2JXUvOVbxOFgIv0sLZ9cDyiJ5at0tkdnYt2mHRiDRLUrQ 2026-04-08 14:30:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiymuxss2i 2026-04-09 11:00:03+00:00| seen|...
CVE-2026-3243
creationtimestamp| type| source ---|---|--- 2026-04-08 13:16:11+00:00| seen| Telegram/w2JXUvOVbxOFgIv0sLZ9cDyiJ5at0tkdnYt2mHRiDRLUrQ 2026-04-08 14:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyjlj2voy2t 2026-04-09 10:59:57+00:00| seen|...
CVE-2026-0233
creationtimestamp| type| source ---|---|--- 2026-04-08 13:04:52+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-331 2026-04-08 19:03:34+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3miyybbe4yt2q 2026-04-09 17:14:19+00:00| seen|...
CVE-2026-0232
creationtimestamp| type| source ---|---|--- 2026-04-08 13:04:52+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-331 2026-04-08 19:03:32+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3miyyb76lmf2p 2026-04-13 10:57:52+00:00| seen|...
nix: absolute path traversal when unpacking archives to disk
A flaw was found in Nix. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal...
Important: Red Hat Security Advisory: git-lfs security update
An update for git-lfs is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...