Filter public vulnerability entries by severity / channel / vendor / time.
CVE-2026-74997 · 2026-11-04 · auto
source_file: rules/2026-08-31/roundcube-dsa-6479.md source: Debian DSA (+hotpatch) status: SIGNAL product: Virtual-patch draft: Debian DSA-6479-1 roundcube (trixie) vuln_type: XSS cves: CVE-2026-74997, CVE-2026-74998, CV…
CVE-2026-20212 · 2026-11-04 · auto
source_file: rules/2026-09-04/cisco-cve-2026-20212.md source: hotpatch high-risk rule draft status: SIGNAL product: Virtual-patch draft: Cisco Nexus 9000 Silicon One vuln_type: RCE cves: CVE-2026-20212 origin: hotpatch l…
CVE-2026-83627 · 2026-11-04 · auto
source_file: rules/2026-09-06/wordpress-hummingbird-cve-2026-83627.md source: hotpatch high-risk rule draft status: SIGNAL product: Virtual-patch draft vuln_type: unauthenticated RCE cves: CVE-2026-83627 floor_hint: ≥ 3.…
CVE-2026-85103 · 2026-11-04 · auto
source_file: rules/2026-09-16/checkpoint-vpn-cve-2026-85102-85103-pins-verified.md source: hotpatch high-risk rule draft status: SIGNAL product: Pin confirm vuln_type: auth bypass cves: CVE-2026-85103 origin: hotpatch lo…
CVE-2025-53266 · 2026-11-04 · auto
source_file: rules/2026-09-22/linux-kernel-cve-2025-39682-39964-53266-still-overdue.md source: hotpatch high-risk rule draft status: OVERDUE dueDate: 2026-09-21 product: Linux Kernel trio [KEV · NEWLY OVERDUE → still OVE…
CVE-2026-88778 · 2026-11-04 · auto
source_file: rules/2026-09-28/citrix-netscaler-kev-new-88771-88772.md source: hotpatch high-risk rule draft status: NEW dueDate: 2026-09-30 product: (due 2026-09-30): Citrix NetScaler vuln_type: RCE cves: CVE-2026-88778 …
CVE-2026-16347 · 2026-11-04 · auto
source_file: rules/2026-10-08/mikrotik-routeros-advisory-update-floor-7-24-3.md source: hotpatch high-risk rule draft status: OVERDUE dueDate: 2026-09-28 cves: CVE-2026-16347, CVE-2026-67276, CVE-2026-67278, CVE-2026-672…
CVE-2026-20032 · 2026-11-04 · auto
source_file: rules/2026-10-08/cisco-nxos-oct-2026-critical-rce-bundle.md source: hotpatch high-risk rule draft status: SIGNAL vuln_type: RCE cves: CVE-2026-20032, CVE-2026-20038, CVE-2026-20173, CVE-2026-76453, CVE-2026-…
CVE-2026-76437 · 2026-11-04 · auto
source_file: rules/2026-10-08/cisco-license-onprem-meraki-finesse-oct-2026.md source: hotpatch high-risk rule draft status: SIGNAL vuln_type: SSRF cves: CVE-2026-76437, CVE-2026-76452, CVE-2026-76463, CVE-2026-76480 orig…
CVE-2026-76465 · 2026-11-04 · auto
source_file: 2026-10-08-digest.md source: CISA KEV (digest priority) status: SIGNAL product: NEW (not KEV) — Cisco NX-OS: 3 Critical unauthenticated root RCE advisories (Oct 7 bundle) vuln_type: RCE cves: CVE-2026-76465,…
CVE-2026-84384 · 2026-11-04 · auto
source_file: rules/2026-09-29/debian-dsa-6523-6527.md status: SIGNAL cves: CVE-2026-84384, CVE-2026-90616, CVE-2026-87902, CVE-2026-53783 product: DSA-6523…6527 (Debian) origin: hotpatch local digest/rules backfill # **…
CVE-2026-19773 · 2026-11-04 · auto
source_file: rules/2026-09-30/debian-dsa-6528-6530.md status: SIGNAL cves: CVE-2026-19773 product: Debian DSA-6528…6530 (beyond yesterday’s DSA-6527 ceiling) origin: hotpatch local digest/rules backfill # **NEW** Debian…
CVE-2026-39324 · 2026-11-04 · auto
source_file: 2026-10-05-digest.md status: SIGNAL cves: CVE-2026-39324 product: 21. Debian / Ubuntu / browsers origin: hotpatch local digest/rules backfill ### 21. Debian / Ubuntu / browsers | Item | Detail | Draft | |-…
CVE-2026-63072 · 2026-11-04 · auto
source_file: rules/2026-10-06/ubuntu-usn-8865-8871.md status: SIGNAL cves: CVE-2026-63072, CVE-2026-54330, CVE-2026-50593, CVE-2026-76878, CVE-2026-53221, CVE-2025-38724, CVE-2026-53131 product: Ubuntu USN-8865…8871 (+ U…
CVE-2026-54330 · 2026-11-04 · auto
source_file: 2026-10-06-digest.md status: SIGNAL cves: CVE-2026-54330, CVE-2026-76878 product: 20. Debian / Ubuntu / browsers origin: hotpatch local digest/rules backfill ### 20. Debian / Ubuntu / browsers | Item | Det…
CVE-2026-55330 · 2026-11-04 · auto
source_file: rules/2026-10-07/android-pixel-2026-10.md status: OVERDUE cves: CVE-2026-55330, CVE-2026-56952, CVE-2026-55307, CVE-2026-0198, CVE-2026-56906, CVE-2026-56936, CVE-2026-58704 product: Android Security Bulleti…
CVE-2026-33168 · 2026-11-04 · auto
source_file: rules/2026-10-07/debian-dsa-6545-6548.md status: SIGNAL cves: CVE-2026-33168, CVE-2026-45363, CVE-2026-13311, CVE-2026-102422 product: Debian DSA-6545…6548 — 2026-10-07 probe origin: hotpatch local digest/ru…
CVE-2026-106016 · 2026-11-04 · auto
source_file: 2026-10-07-digest.md status: SIGNAL cves: CVE-2026-106016 product: 20. Browsers / mobile origin: hotpatch local digest/rules backfill ### 20. Browsers / mobile | Item | Detail | Draft | |---|---|---| | **C…
CVE-2026-106382 · 2026-11-04 · auto
source_file: rules/2026-10-07/chrome-stable-155-0-8059-39.md status: OVERDUE cves: CVE-2026-106382 product: Chrome 155 to Stable — Desktop 155.0.8059.39/.40 (2026-10-06 PT) origin: hotpatch local digest/rules backfill #…
CVE-2026-81934 · 2026-11-04 · auto
source_file: 2026-10-08-digest.md status: SIGNAL cves: CVE-2026-81934, CVE-2026-92925, CVE-2026-96512, CVE-2026-19773 product: 18. Ubuntu origin: hotpatch local digest/rules backfill ### 18. Ubuntu | Item | Detail | Dr…
CVE-2026-20328 · 2026-11-04 · auto
source_file: 2026-10-08-digest.md status: SIGNAL cves: CVE-2026-20328, CVE-2026-76454, CVE-2026-20362 product: 2. NEW (not KEV) — Cisco License On-Prem (SSM On-Prem) pre-auth admin takeover · Meraki · Finesse origin: hot…
CVE-2026-76471 · 2026-11-04 · auto
source_file: rules/2026-10-09/cisco-nxos-napi-rce-advisory-v1-1-ucs-table.md status: SIGNAL cves: CVE-2026-76471 product: Cisco NX-API RCE advisory v1.1 (UCS fixed table) origin: hotpatch local digest/rules backfill # H…
CVE-2026-87724 · 2026-11-04 · auto
source_file: rules/2026-10-11/debian-dsa-6551-tor.md status: SIGNAL cves: CVE-2026-87724 product: Debian DSA-6551-1 — tor origin: hotpatch local digest/rules backfill # **NEW** Debian DSA-6551-1 — tor **Status:** local…
CVE-2026-102322 · 2026-11-04 · auto
source_file: rules/2026-10-13/debian-dsa-6553-6556.md status: SIGNAL cves: CVE-2026-102322, CVE-2026-90460, CVE-2026-96889, CVE-2026-48549 product: Debian DSA-6553..6556 — chromium / keystone / librsvg / nagios4 origin: …
CVE-2026-20293 · 2026-11-04 · auto
source_file: rules/2026-10-14/cisco-ucs-uefi-sb-bypass-2026-20293.md status: SIGNAL cves: CVE-2026-20293 product: Cisco UCS UEFI Shell Secure Boot Bypass origin: hotpatch local digest/rules backfill # **NEW** Cisco UCS …
CVE-2026-109125 · 2026-11-04 · auto
source_file: rules/2026-10-24/debian-dsa-6579-6582.md status: SIGNAL cves: CVE-2026-109125, CVE-2026-111497 product: Debian NEW DSA-6579..6582 (ceiling 6578 → 6582) origin: hotpatch local digest/rules backfill # Hotpatc…
CVE-2026-97205 · 2026-11-04 · auto
source_file: rules/2026-10-27/ubuntu-usn-8955-8956.md status: SIGNAL cves: CVE-2026-97205, CVE-2026-111497 product: Ubuntu NEW USN-8955 · USN-8956 (ceiling 8954 → 8956) origin: hotpatch local digest/rules backfill # Hot…
CVE-2026-114148 · 2026-11-04 · auto
source_file: rules/2026-10-30/ubuntu-usn-8958.md status: NEW dueDate: 2026-11-10 cves: CVE-2026-114148, CVE-2026-102870, CVE-2026-111497 product: Ubuntu USN-8958-1 (.NET) — ceiling 8957 → 8958 origin: hotpatch local dige…
CVE-2026-117860 · 2026-11-04 · auto
source_file: rules/2026-10-31/debian-dsa-6597-6598.md status: SIGNAL cves: CVE-2026-117860 product: Debian DSA ceiling 6596 → 6598 origin: hotpatch local digest/rules backfill # Hotpatch rule draft — Debian DSA ceiling …
CVE-2024-58074 · 2026-11-04 · auto
source_file: rules/2026-11-03/debian-dsa-6602-6604.md status: OVERDUE cves: CVE-2024-58074, CVE-2026-112818, CVE-2026-46300 product: Debian DSA-6602 (linux) · DSA-6603 (git-annex) · DSA-6604 (incus) origin: hotpatch loca…
CVE-2026-119260 · 2026-11-04 · auto
source_file: rules/2026-11-04/debian-dsa-6605-6606.md status: SIGNAL cves: CVE-2026-119260, CVE-2026-104786, CVE-2026-61642, CVE-2026-62846, CVE-2026-46300 product: Debian DSA-6605 chromium · DSA-6606 squid (ceiling 6604…
CVE-2017-5647 · 2026-11-02 · auto
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined reques…
CVE-2012-0059 · 2026-10-30 · auto
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrat…
CVE-2011-3344 · 2026-10-30 · auto
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to informatio…
CVE-2011-2927 · 2026-10-30 · auto
A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. …
CVE-2011-2920 · 2026-10-30 · auto
A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such…
CVE-2011-1594 · 2026-10-30 · auto
A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. Th…
CVE-2012-3427 · 2026-10-30 · auto
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This…
CVE-2013-1840 · 2026-10-30 · auto
A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the…
CVE-2013-0266 · 2026-10-30 · auto
A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the `cinder.conf` and `api-paste.ini` configu…
CVE-2013-0261 · 2026-10-30 · auto
A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the…
CVE-2012-5605 · 2026-10-30 · auto
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/`…
CVE-2012-4574 · 2026-10-30 · auto
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This informatio…
CVE-2012-5625 · 2026-10-30 · auto
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to ob…
CVE-2012-5571 · 2026-10-30 · auto
A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Com…
CVE-2011-4346 · 2026-10-30 · auto
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Cu…
CVE-2009-4139 · 2026-10-30 · auto
A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, incl…
CVE-2013-2056 · 2026-10-30 · auto
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to b…
CVE-2006-4339 · 2026-10-30 · auto
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequen…
CVE-2006-2073 · 2026-10-24 · auto
Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite.