CVE-2026-54282

Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...

CVE-2026-46875

...

CVE-2026-46874

...

CVE-2026-0270

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:20+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmtixdo25 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917...

CVE-2026-46830

...

GHSA-CQ46-HP4H-CVFR

creationtimestamp| type| source ---|---|--- 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...

CVE-2026-34994

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-35235

...

CVE-2026-35236

...

CVE-2026-34314

...

CVE-2026-34307

The CVE-2026-34307 entry concerns Oracle PeopleSoft/PeopleTools (Workflow) with affected versions 8.61–8.62. The vulnerability is exploitable over HTTP by a low-privilege attacker, requiring user interaction, and can lead to unauthorized update/insert/delete and read access to PeopleSoft data, wi...

CVE-2026-22021

...

CVE-2026-5250

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

BELL-CVE-2026-40393

Bulletin has no description...

CVE-2026-32084

creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-15 06:53:38+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119...

CVE-2026-39856

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an out-of-bounds read vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When processing PE sections for page hashing, the function uses...

CVE-2026-2366

creationtimestamp| type| source ---|---|--- 2026-03-12 12:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgugpbhbe32e...

CVE-2018-2209

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...

BELL-CVE-2026-2006

Bulletin has no description...

CVE-2026-23014

creationtimestamp| type| source ---|---|--- 2026-01-28 15:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdilogrebe2h...