Search Vulnerabilities

Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint

Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled

Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access

OCSP responder certificate validity period not checked in public_key

Possible arbitrary code execution during DNSSEC validation

Discourse: Cached outdated summaries can leak removed content

post edit time limit is not enforced on some post update operations

OpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation

Apache::Session versions through 1.94 for Perl re-creates deleted sessions

OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution

Permalink Preview Information Disclosure After Permission Revocation

Parse Server MFA recovery codes not consumed after use

Heap-use-after-free in CIccCmm::AddXform()

Vulnerable cross-model authorization in juju

In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the dev...

BIG-IP HTTP/2 vulnerability

MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation