315 matches found
CVE-2026-71849 Hono: Proxy Helper does not remove response headers listed in the `Connection` header
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header...
CVE-2026-69096
creationtimestamp| type| source ---|---|--- 2026-08-04 04:05:00+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msa533lecw2m...
Linux Distros Unpatched Vulnerability : CVE-2026-17901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation...
BELL-CVE-2026-64430
Bulletin has no description...
GHSA-J5G9-F88F-GFJ3 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.13-sdk, openstack-horizon-2025.1, openstack-glance-2026.1, openstack-nova-2026.1, kubeflow-pipelines-visualization-server, openstack-glance-2025.2, authentik, openstack-keystone-2025.2, openstack-horizon-2025.2, openstack-horizon-2025.2-fips,...
BELL-CVE-2026-64185
Bulletin has no description...
CVE-2026-62530
Vulnerability in the Oracle HRMS France product of Oracle E-Business Suite component: French HR. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS France. Successful attac...
CVE-2026-61168
...
CVE-2026-61153
...
CVE-2024-23569
HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header...
CVE-2026-50353
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:02:35+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:34+00:00| seen|...
CVE-2026-50480
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:05:00+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:18+00:00| seen|...
UBUNTU-CVE-2026-15697
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...
CVE-2026-6371 Stored XSS in Limatek's LimRAD NAC
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This issue affects LimRAD NAC: before 5.5.7.3.9...
Chromium: CVE-2026-13884 Heap buffer overflow in Chromecast
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-31583
creationtimestamp| type| source ---|---|--- 2026-07-02 05:48:33+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 05:50:35+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...
CVE-2026-8857
A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from before 1.46.0, 1.45.4, 1.44.6, 1.43.9...
PT-2026-53654
Name of the Vulnerable Software and Affected Versions Gigamon GVOS versions prior to 5.16.2 Description The GVOS H-VUE subsystem contains a directory traversal flaw, which allows an attacker to access files and directories outside the intended folder. Recommendations Update Gigamon GVOS to versio...
Chromium: CVE-2026-12448 Inappropriate implementation in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...