CVE-2026-12620

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...

CVE-2026-12620

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...

CVE-2026-49871

creationtimestamp| type| source ---|---|--- 2026-06-19 15:25:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monnobmqmq2v 2026-06-20 09:38:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116781763259383270 2026-08-23 17:25:03+00:00| seen|...

CVE-2019-25747

creationtimestamp| type| source ---|---|--- 2026-06-19 15:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monnn4arx22g...

CVE-2016-20087

creationtimestamp| type| source ---|---|--- 2026-06-19 15:17:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monn7yirbe2m...

CVE-2026-49358

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, AbstractGenerator::$temporaryFiles is a public array, and removeTemporaryFiles — invoked from destruct and from a registered shutdown function — calls unlink on every entry without verifying...

CVE-2026-52910

In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. 0 The repro sets up a UDP reuseport group with a cBPF prog and replaces it with a new one while another thread is sending a U...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2107 more potentially affected by CVE-2026-11525 via undici (>=6.0.0, <=6.26.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =0.5.21-beta.0, =0.5.43 and more Source cves: CVE-2026-11525 Source advisory: OSV:GHSA-G8M3-5G58-FQ7M...

CVE-2026-39998

creationtimestamp| type| source ---|---|--- 2026-06-19 14:20:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monjzwsif22r 2026-06-27 07:05:13+00:00| seen| https://bsky.app/profile/potato.software/post/3mpavgflvtw26 2026-06-27 07:05:13+00:00| seen|...

GHSA-HM92-R4W5-C3MJ undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Impact When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination. This cause...

CVE-2026-47339

Incorrect Authorization vulnerability in Apache APISIX. An attacker can capitalise on authz-casdoor plugin under default configuration to authenticate themselves with credentials from a different source. This issue affects Apache APISIX: from 2.14.1 through 3.16.0. Users are recommended to upgrad...

CVE-2026-52908

In the Linux kernel, the following vulnerability has been resolved: RDMA: During reregmr ensure that REREGACCESS is compatible If IBMRREREGACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr stru...

Chromium: CVE-2026-12445 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-12467 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-48936

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 02:31:44+00:00| seen|...

CVE-2026-56141

creationtimestamp| type| source ---|---|--- 2026-06-19 13:40:07+00:00| seen| https://bsky.app/profile/suriq.io/post/3monhqxqisu2b 2026-06-19 16:25:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monqyrh4sd2g 2026-06-21 12:07:15+00:00| seen|...

GHSA-QW6V-5FCF-5666 Network-AI: Improper Neutralization of Special Elements used in an OS Command

Summary The agent sandbox gates shell commands behind an allowlist SandboxPolicy.isCommandAllowed, which THREATMODEL.md calls the main control against a compromised agent Adversary 3.2. The allowlist glob-matches the whole command string, but ShellExecutor runs that string through /bin/sh -c. So...

EUVD-2026-38021

A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control...

CVE-2026-12706

creationtimestamp| type| source ---|---|--- 2026-06-19 12:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monds67tmg2k...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: virtiobt: Does not validate the rxpkttype header length. The virtbtrxhandle function reads the pkttype byte from the RXskb and passes the remaining data to hcirecvframe for every event/ACL/SCO/ISO type. It does not...