CVE-2026-11371

creationtimestamp| type| source ---|---|--- 2026-07-16 07:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqabx7dw2w...

kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...

CVE-2026-12978

The FunnelKit WordPress plugin before 3.15.0.6 does not escape a user-supplied parameter before reflecting it into the HTML response of one of its page-builder AJAX actions, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against logged-in users who open a crafted pag...

UBUNTU-CVE-2026-53366

In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In ipappenddata, when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen;...

ROOT-APP-NPM-CVE-2024-21507 CVE-2024-21507 in @rootio/mysql2 - Patched by Root

Root has patched CVE-2024-21507 in the @rootio/mysql2 package for Root:npm. Multiple fixed versions available...

CVE-2026-12869

The CVE-2026-12869 entry concerns the WordPress plugin Header Footer Builder for Elementor, fixed in version 1.2.1. The vulnerability arises because dashboard template-import does not require an administrative capability, allowing any user with edit_posts to import a template. An attacker with Co...

EUVD-2026-44873

The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actually validated before authenticating a user based on a supplied identifier, allowing unauthenticated attackers to log in as any existing user, including administrators, as well ...

CVE-2026-12525

The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by submitting a crafted value while updating their own profile...

CVE-2026-12585

The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing unauthenticated attackers to forge a recovery link that logs them in as another user when the automatic-login option is...

CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

CVE-2026-28642

creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:58+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

CVE-2026-48863

creationtimestamp| type| source ---|---|--- 2026-07-16 04:14:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqeqnnenp2l...

GHSA-R7M2-3JGC-7X2C vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp...

CVE-2026-31771 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp...

GHSA-3F6R-V6W8-RW99 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-gcp, linux-aws...

GHSA-R46F-Q3F8-WRRG vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp...

GHSA-6HVC-RWFC-MP4J vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-gcp, linux-aws...

GHSA-X889-PRF3-G3VG vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp...

Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues The following security issues were fixed: CVE-2026-43037: ip6tunnel: clear skb2-cb in ip4ip6err bsc1265197. CVE-2026-45970: bonding: alb: fix UAF in rlbarprecv during bond up/down bsc1267206...

MGASA-2026-0256 Updated poppler packages fix a security vulnerability

The updated packages fix a security vulnerability: Integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication. CVE-2026-10118...