[NEW] [medium] MISP: Vulnerability allows bypassing of security measures
A remote, authenticated attacker can exploit a vulnerability in MISP to bypass security measures.
Advisories tracked
21,290
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,786
Sources online
24
Last sync
5H AGO
[NEW] [high] Microsoft Edge: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Microsoft Edge to execute arbitrary code and gain the permissions of an attacked user.
[NEW] [high] JetBrains TeamCity: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in JetBrains TeamCity to execute arbitrary code, manipulate data, or perform cross-site scripting attacks.
[NEW] [medium] Linux Kernel (xfrm: iptfs): Vulnerability allows DoS and data manipulation
A local attacker can exploit a vulnerability in Linux Kernel to potentially trigger a denial-of-service condition or manipulate data.
[NEW] [high] JetBrains IntelliJ IDEA: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in JetBrains IntelliJ IDEA to execute arbitrary code.
[NEW] [medium] Coolify: Vulnerability allows bypassing of security measures
A remote, authenticated attacker can exploit a vulnerability in Coolify to bypass security measures.
[NEW] [medium] MailPit: Vulnerability allows bypassing of security measures
A remote, anonymous attacker can exploit a vulnerability in MailPit to bypass security measures.
[NEW] [medium] CUPS: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in CUPS to disclose information.
[NEW] [high] Kyverno: Vulnerability allows privilege escalation
A remote, authenticated attacker can exploit a vulnerability in Kyverno to escalate their privileges.
[NEW] [medium] avahi daemon: Multiple vulnerabilities allow Denial of Service
An attacker can exploit multiple vulnerabilities in avahi daemon to conduct a Denial of Service attack.
NCSC-2026-0228 [1.00] [M/H] Vulnerabilities fixed in n8n workflow automation platform
n8n has fixed multiple vulnerabilities in the n8n workflow automation platform. The vulnerabilities include: - An authorization issue where authenticated users can assign workflows to folders within projects they do not have access to, due to insufficient validation of request pa…
NCSC-2026-0227 [1.00] [M/H] Vulnerabilities fixed in Palo Alto Networks PAN-OS
Palo Alto Networks has fixed multiple vulnerabilities in PAN-OS software, specifically in PA-Series and VM-Series firewalls, as well as Panorama management platforms. The vulnerabilities affect various components of PAN-OS. - There are multiple cross-site scripting (XSS) vulnerab…
NCSC-2026-0226 [1.00] [M/H] Vulnerabilities fixed in Progress MOVEit Transfer
Progress has fixed vulnerabilities in MOVEit Transfer, specifically in the Custom Reports modules and the Ad Hoc module. The vulnerabilities affect multiple versions of MOVEit Transfer, including 25.0.0 to 25.0.7, 25.1.0 to 25.1.3, and 26.0.0 up to just before 26.0.1. One vulnera…
[UPDATE] [high] OWASP ModSecurity: Multiple vulnerabilities allow bypassing of security measures
A remote, anonymous attacker can exploit multiple vulnerabilities in OWASP ModSecurity to bypass security measures.
[UPDATE] [medium] Snipe-IT: Vulnerability allows information disclosure
An attacker can exploit a vulnerability in Snipe-IT to disclose information.
[UPDATE] [medium] Drupal: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Drupal to bypass security measures, conduct a Cross-Site Scripting attack, disclose information, conduct an SQL injection attack, and manipulate data.
[UPDATE] [medium] Snipe-IT: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Snipe-IT to manipulate files, bypass security precautions, conduct a cross-site scripting attack, and execute arbitrary code.
[UPDATE] [critical] Drupal Core: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Drupal Core to execute arbitrary code, conduct cross-site scripting attacks, manipulate data, or redirect users to malicious websites.
[UPDATE] [high] Drupal Modules: Multiple vulnerabilities allow data manipulation
An attacker can exploit multiple vulnerabilities in Drupal to manipulate data.
[UPDATE] [high] Snipe-IT: Vulnerability allows bypassing security precautions
A remote, authenticated attacker can exploit a vulnerability in Snipe-IT to bypass security precautions and manipulate data.
[UPDATE] [medium] Erlang/OTP: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Erlang/OTP to bypass security precautions, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [medium] Drupal: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Drupal to conduct a cross-site scripting attack, bypass security measures, and cause further unspecified impacts.
[UPDATE] [high] Drupal AlternativeCommerce (Basket): Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in the Drupal module "AlternativeCommerce" (Basket) to execute arbitrary code.
[UPDATE] [high] Flowise: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Flowise to execute arbitrary code, bypass security measures, disclose information, and manipulate files.
[UPDATE] [medium] Oracle Java SE: Multiple vulnerabilities
A remote, anonymous or authenticated attacker can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
[UPDATE] [high] n8n: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in n8n to gain elevated privileges, including administrator rights, execute arbitrary code, manipulate data, bypass security measures, disclose confidential information, or conduct cross-site and man-in-the-middle attacks.
[UPDATE] [high] tigervnc: Vulnerability allows information disclosure, file manipulation, and denial of service
A local attacker can exploit a vulnerability in tigervnc to disclose information, manipulate files, and conduct a denial of service attack.
[UPDATE] [medium] SaltStack Salt: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in SaltStack Salt to execute arbitrary code or bypass security measures.
[UPDATE] [high] FreeRDP: Multiple vulnerabilities allow DoS and code execution
A remote, anonymous attacker can exploit multiple vulnerabilities in FreeRDP to cause a denial-of-service condition or possibly execute arbitrary code.
[UPDATE] [high] Xwayland and X.Org X11: Multiple vulnerabilities allow unspecified attack
A remote, anonymous attacker can exploit multiple vulnerabilities in Xwayland and X.Org X11 to conduct an unspecified attack.
[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities Allow Denial of Service
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a denial of service attack or achieve unspecified effects.
[UPDATE] [medium] Red Hat Enterprise Linux (python-idna): Vulnerability allows denial of service
A remote, authenticated attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a denial of service attack.
[NEW] [medium] Drupal Extensions: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Drupal to conduct a cross-site scripting attack, bypass security measures, and manipulate data.
[UPDATE] [medium] Django: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Django to conduct a denial of service attack.
[UPDATE] [medium] Red Hat Enterprise Linux (ruby: net-imap): Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to conduct a denial of service attack, bypass security measures, manipulate data, or disclose confidential information.
[UPDATE] [medium] Django: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Django, Debian Linux, and Ubuntu Linux to conduct a denial of service attack.
[UPDATE] [high] Red Hat Enterprise Linux (Django): Vulnerability allows file manipulation
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux in the Django component to manipulate files.
[UPDATE] [medium] X.Org X11 and Xwayland: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in X.Org X11 and Xwayland to cause a Denial-of-Service state and potentially execute code or achieve unspecified effects.
[UPDATE] [high] SaltStack Salt: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in SaltStack Salt to bypass security measures, manipulate files, execute arbitrary code, trigger a denial of service, or achieve further unspecified impacts.
[UPDATE] [high] Python: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Python to manipulate files or bypass security measures.
NCSC-2026-0225 [1.00] [M/H] Vulnerabilities fixed in Siemens SICORE
Siemens has fixed vulnerabilities in SICORE Base systems, specifically in versions below V26.20. The vulnerabilities are present in multiple components of the CPCI85 and SICORE Base systems. One vulnerability allows an authenticated attacker to crash the web service via an HTTP-a…
NCSC-2026-0224 [1.00] [M/H] Vulnerabilities fixed in Juniper Networks Junos OS and Junos OS Evolved
Juniper has fixed multiple vulnerabilities in Junos OS and Junos OS Evolved, specifically for MX Series, PTX Series, QFX Series, EX Series, SRX Series, and QFX10000 Series devices. The vulnerabilities affect various components within Junos OS and Junos OS Evolved, including the p…
Denial-of-service (DoS) vulnerability in the in-app browser of LINE client for iOS
LINE client for iOS provided by LY Corporation contains a vulnerability in the in-app browser due to insufficient safeguards when handling arbitrary URL schemes, which may lead to denial-of-service (DoS) condition.
CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI…
DSA-6387-1 chromium - security update
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. https://security-tracker.debian.org/tracker/DSA-6387-1
GHSA-g936-7jqj-mwv8: TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation
Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When identityHeaders is enabled (the default), tsdproxy injects x-tsdproxy-auth-token into every upstream HTTP request alongsid…
GHSA-fpg8-7664-jc5q: melange: Incomplete package integrity verification allows data section substitution
Previously, Apko verified the control section hash (.PKGINFO etc.) against the signed APKINDEX, but never verified the data section hash (the actual package files that get installed). An attacker who could compromise a mirror, poison a cache, or MITM a package fetch could substit…
GHSA-48rx-c7pg-q66r: Excon does not redact additional sensitive/risky headers when following redirects
Impact The redirect follower middleware previously failed to strip a number of headers that are known to be sensitive and did not provide a way to provide a custom list of headers to strip. _What kind of vulnerability is it? Who is impacted?_ This could cause inadvertent leakage…
GHSA-h4g2-xfmw-q2c9: Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
Summary A Clauster instance bound to a non-loopback address (e.g. 0.0.0.0 or a LAN IP) can serve the entire dashboard and its API without any authentication — even when the operator has configured a password — if auth.enabled is left at its default (false). The operator believes …
GHSA-rqq5-2gf9-4w4q: Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input
Summary secure_headers builds the Content-Security-Policy value by stitching every configured directive together with ; separators. Three directive builders (build_sandbox_list_directive, build_media_type_list_directive, build_report_to_directive) interpolate caller-supplied str…