CVE Vulnerabilities - 3 July 2026

Gardyn IoT devices have a security flaw that allows hackers to access sensitive information about all connected devices and potentially take control of them. This could lead to unauthorized access to ...

Gitea versions before 1.26.0 have a security issue that can allow someone to push changes to a protected branch if the Gitea server receives very large input. This is a concern because it can allow un...

Versions of Gitea before 1.25.5 allow attackers to bypass security restrictions for large file transfers. This can allow unauthorized access to sensitive data. To fix this, update to Gitea version 1.2...

A security issue in Keras 3.14.0 allows an attacker to execute malicious code on the server or user's machine. This could happen if an attacker is able to manipulate the data used to load or clone Ker...

The @rootio/protobufjs package in Root:npm has a data tampering risk. This means that an attacker could manipulate data to deceive users. Root has released a patch to fix this issue, and you should up...

The Root vitest package had a vulnerability that could allow an attacker to execute unauthorized code. This could have let a malicious user access or modify sensitive data. Root has released a patch t...

The rootio-openexr software, used for image processing, has a bug that can be exploited by a malicious image file. This could cause a server to crash, leading to downtime and potential data loss. Root...

A security weakness in Raera Destekz's software allows hackers to inject malicious SQL code, potentially accessing or modifying sensitive data. This issue affects Destekz's users and can be exploited ...

Apache Lucene.Net's PatternParser has a weakness that can allow attackers to inject malicious XML data. This could potentially cause harm to your system. To fix this, update to version 4.8.0-beta00018...

A fix for a previous Hplip vulnerability was not fully implemented, leaving the software open to potential attacks. This could allow a malicious attacker to gain higher-level access to a system. Users...

libcurl, a software used for internet transfers, has a flaw that can expose old proxy passwords. This is a concern because it allows unauthorized access to proxy servers. To protect your systems, upda...

A bug in libcurl can cause it to accidentally send passwords meant for one website to another. This can happen if you use libcurl to log in to a website with a password, and then try to access another...

Libcurl, a widely-used library for making HTTP requests, has a bug that could allow an attacker to cause a crash or potentially exploit the system if a web application uses libcurl to handle HTTP/2 co...

A security issue exists in libcurl's HTTP/2 feature when resetting a connection. If an application uses this feature and then closes the connection, sensitive data may be leaked. To fix this, update t...

HPLIP, a software used for printing with HP devices on Linux systems, has a security issue. If an attacker sends specially crafted print data, they could potentially gain more access to the system or ...

A vulnerability in WatchGuard Firebox's Mobile User VPN with IKEv2 allows an attacker to run unauthorized code on affected devices. This affects WatchGuard Firebox devices using IKEv2 with an external...

Gitea versions before 1.25.5 have a security issue that could allow unauthorized access to tokens. This is a concern because it could lead to attackers getting access to sensitive information. To fix ...

Gitea versions before 1.25.5 may allow unauthorized access if an attacker intercepts an OAuth2 authorization code. This is because Gitea does not enforce a time limit for the code to be used and does ...

Gitea versions before 1.25.5 can read or write files outside intended templates, potentially exposing sensitive data. This affects users who store templates in non-standard locations. To protect your ...

Gitea versions before 1.25.5 allow users to create repositories with invalid settings. This can lead to security issues or data corruption. To fix this, update Gitea to version 1.25.5 or later.

A vulnerability in Gitea allows users with personal access tokens of any scope to download private repository archives. This affects users who have created such tokens, potentially exposing sensitive ...

A bug in the Net::IP::LPM module for Perl could allow an attacker to access memory they shouldn't. This bug is not likely to cause direct harm but could be detected by certain security tools. To stay ...

The rootio-openexr package in Root's Debian 11 environment had a security issue that could allow unauthorized access to sensitive files. Root has released a patch to fix this issue, and users are advi...

When using libcurl to transfer data through multiple proxies, sensitive authentication information may be accidentally shared between transfers. This can happen when the proxy settings are changed bet...

Curl incorrectly retrieves passwords from .netrc files when a username is specified in the URL. This can expose passwords for the wrong user if multiple users are configured for the same host. To prev...