262028 matches found
CVE-2026-38891
creationtimestamp| type| source ---|---|--- 2026-07-02 14:30:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoamueozu2n 2026-07-03 09:24:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7zgfzit2p...
CVE-2026-54712
creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w 2026-07-03 09:15:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y 2026-07-29 20:31:26+00:00| seen|...
GHSA-64JQ-M7RQ-768H vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-Q6C7-56CQ-G2WM vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-CQP7-WF4C-3XGC vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-VQPH-P5VC-G644 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-2PF9-VR92-6H3V vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...
PYSEC-2026-676 MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
Cross-site scripting XSS vulnerability in the antispam feature security/antispam.py in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content...
PYSEC-2026-758 Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...
PYSEC-2026-659 mailman Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...
PYSEC-2026-640 SQL Injection in FreeTAKServer-UI
FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser...
PYSEC-2026-738 open redirect in pollbot
From https://bugzilla.mozilla.org/showbug.cgi?id=1753838 Summary: There was an open redirection vulnerability in the path of: https://pollbot.services.mozilla.com/ and https://pollbot.stage.mozaws.net/ Description: An attacker can redirect anyone to malicious sites. Steps To Reproduce: Type in th...
WordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Aqua versions = 5.1.2...
CVE-2026-5524
creationtimestamp| type| source ---|---|--- 2026-07-02 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116850624546842014 2026-07-02 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpo5c24aet2x 2026-07-02 20:00:44+00:00| seen|...
CVE-2026-54430
creationtimestamp| type| source ---|---|--- 2026-07-02 13:15:02+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-54430 2026-07-02 23:17:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp62olsut2i 2026-07-03 03:29:23+00:00| seen|...
Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net
Summary Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net. CVE-2026-33814 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loo...
CVE-2026-58653 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update
PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...
ROOT-APP-GOBINARY-CVE-2026-53492 CVE-2026-53492 in rootio-github.com/containerd/containerd/v2 - Patched by Root
Root has patched CVE-2026-53492 in the rootio-github.com/containerd/containerd/v2 package for Root:Go. Multiple fixed versions available...
