Where
-Infinity
0

redhat/rh-sso7-keycloakPath Traversal in Moment.js

Risk 46
Severity
7.5
First published (updated )

Apple iOS and macOSPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Risk 57
Severity
8.2
First published (updated )

Apple iOS and macOSPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

Risk 90
Severity
9.8
First published (updated )

Debian Debian LinuxNULL pointer dereference in httpd core

Risk 45
Severity
7.5
First published (updated )

McAfee ePolicy OrchestratorRead buffer overruns processing ASN.1 strings

Risk 60
Severity
7.4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/jbcs-httpd24-httpdRequest splitting via HTTP/2 method injection and mod_proxy

Risk 45
Severity
7.5
First published (updated )

IBM Business Automation InsightsArbitrary Code Injection

Risk 89
Severity
9.8
First published (updated )

Tenable Nessus Network MonitorNull pointer deref in X509_issuer_and_serial_hash()

Risk 46
Severity
5.9
First published (updated )

Tenable Tenable.ScIn certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the …

Risk 43
Severity
7.5
First published (updated )

Canonical Ubuntu LinuxPHP parses encoded cookie names so malicious `__Host-` cookies can be sent

Risk 28
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Ubuntu LinuxWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV

Risk 41
Severity
6.5
First published (updated )

Tenable Tenable.ScXSS, Input Validation

Risk 34
Severity
5.4
First published (updated )

Canonical Ubuntu LinuxSQL Injection

Risk 45
Severity
7.5
First published (updated )

Oracle Communications Network Charging And ControlSQL Injection, Use After Free

Risk 86
Severity
9.8
First published (updated )

PHP PHPget_headers() silently truncates after a null byte

Risk 28
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Ubuntu Linuxmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

Risk 81
Severity
8.8
First published (updated )

Canonical Ubuntu LinuxUse-of-uninitialized-value in exif

Risk 42
Severity
6.5
First published (updated )

PHP PHPOOB read in php_strip_tags_ex

Risk 70
Severity
9.1
First published (updated )

PHP PHPglobal buffer-overflow in mbfl_filt_conv_big5_wchar

Risk 70
Severity
9.1
First published (updated )

PHP PHPFiles added to tar with Phar::buildFromIterator have all-access permissions

Risk 33
Severity
5.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Data Risk ManagerSQL Injection

Risk 33
Severity
5.5
First published (updated )

Handlebars.js Project Handlebars.js Node.jsVersions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code E…

Risk 88
Severity
9.8
First published (updated )

Canonical Ubuntu Linuxheap-buffer-overflow on exif_scan_thumbnail in EXIF extension

Risk 50
Severity
7.1
First published (updated )

Canonical Ubuntu Linuxheap-buffer-overflow on exif_process_user_comment in EXIF extension

Risk 50
Severity
7.1
First published (updated )

F5 BIG-IP Access Policy ManagerXSS

Risk 40
Severity
6.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203