GHSA-JQH4-M9W3-8HP9

creationtimestamp| type| source ---|---|--- 2026-07-22 12:00:59+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmbavjt25 2026-08-12 12:01:33+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gmhtf62e...

MINI-7R75-J3MC-249J

Bulletin has no description...

CVE-2026-47010

A flaw was found in OpenJDK. ASAN reports a heap integrity violation...

BELL-CVE-2026-63959

Bulletin has no description...

CVE-2026-16392

creationtimestamp| type| source ---|---|--- 2026-07-22 04:47:16+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

CVE-2026-16351

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqgdbx2i22 2026-07-24 00:01:17+00:00| see...

CVE-2026-63262

creationtimestamp| type| source ---|---|--- 2026-07-22 03:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7dms6imx23...

GHSA-8V84-F9PQ-WR9X vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset, tensorflow-gpu-jupyter, openstack-horizon-2026.1-fips, mlflow, openstack-horizon-2026.1, open-webui, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, text-generation-inference, superset-fips,...

CVE-2026-62546

creationtimestamp| type| source ---|---|--- 2026-07-22 01:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr773trwh72i 2026-07-22 16:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrarcxmbpu23 2026-07-23 18:20:51+00:00| seen|...

CVE-2026-62516

creationtimestamp| type| source ---|---|--- 2026-07-22 01:33:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76kv4tsj2g 2026-07-23 18:20:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-56819

creationtimestamp| type| source ---|---|--- 2026-07-22 01:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr74onri4f2m 2026-07-22 02:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7cf3wyvf23 2026-07-27 16:00:06+00:00| seen|...

EUVD-2026-47563

Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...

CVE-2026-65014: Missing Authentication for Critical Function

n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The...

CVE-2026-13089: Improper Verification of Cryptographic Signature

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

PT-2026-63447

Name of the Vulnerable Software and Affected Versions ONTAP versions 9.16.1 and higher Description An issue exists in the WebAuthn multi-factor authentication MFA configuration related to the Relying Party ID. An attacker possessing valid credentials could exploit this to bypass the MFA process...

RockyLinux 10 : c-ares (RLSA-2026:42096)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:42096 advisory. c-ares: c-ares: Use-after-free / double-free in query-completion handling CVE-2026-33630 Tenable has extracted the preceding description block directly from the...

PT-2026-63495

Name of the Vulnerable Software and Affected Versions OIDC::Lite versions through 0.12.1 Description An issue exists where ID Token signature verification can be bypassed due to a token-controlled algorithm allowlist in the verify function. When a caller does not specify a pinned algorithm, the...

CVE-2026-60259

creationtimestamp| type| source ---|---|--- 2026-07-21 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xnk54l42r 2026-07-23 16:49:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 11:37:06+00:00| seen|...

CVE-2026-60249

creationtimestamp| type| source ---|---|--- 2026-07-21 23:22:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q 2026-07-23 16:49:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 23:07:07+00:00| seen|...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...