278 matches found
SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4193-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4193-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass content security policy through a crafted HTML page. Chromium security severity: Low...
CVE-2026-19948: Missing Authorization
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.17. This is due to the plugin not properly verifying that a user is authorized to perform an...
CVE-2026-75019: Improper Neutralization of Input During Web Page Generation
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...
CVE-2026-11976
creationtimestamp| type| source ---|---|--- 2026-08-06 22:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5d24pcv2f...
CVE-2026-65571
creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgftzmnlr2l...
CVE-2026-48330
creationtimestamp| type| source ---|---|--- 2026-08-03 22:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lwd2mby2u 2026-08-04 00:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pgf3mdc2x 2026-08-06 16:16:07+00:00| seen|...
CVE-2026-15950: Improper Neutralization of Input During Web Page Generation
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization an...
CVE-2026-18446
creationtimestamp| type| source ---|---|--- 2026-07-31 16:58:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxggkrye42v 2026-08-02 09:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3mmrwppv2n 2026-08-31 16:08:03+00:00| seen|...
CVE-2026-48393
creationtimestamp| type| source ---|---|--- 2026-07-28 18:57:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3pgddzj2o...
CVE-2026-17512
The CVE-2026-17512 entry concerns ggml-org whisper.cpp (version 1.8.4-58). The vulnerability affects the function log_mel_spectrogram in src/whisper.cpp and enables an out-of-bounds read. Access is locally exploitable, requiring that the attacker run code on the affected host. A pull request to f...
CVE-2026-15334: Improper Neutralization of Input During Web Page Generation
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon.view' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output...
CVE-2026-15333: Improper Neutralization of Input During Web Page Generation
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output...
CVE-2026-59514
creationtimestamp| type| source ---|---|--- 2026-07-23 12:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvbd3cpb2u...
CVE-2026-59678
creationtimestamp| type| source ---|---|--- 2026-07-22 16:26:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mraqhvveol26...
CVE-2026-61548
creationtimestamp| type| source ---|---|--- 2026-07-20 17:42:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3trxldl322 2026-09-21 12:15:04+00:00| seen| https://www.acn.gov.it/portale/w/rsyslog-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-55556-e-cve-2026-61548 2026-09-...
CVE-2026-56130
creationtimestamp| type| source ---|---|--- 2026-06-24 18:58:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2lukil662t 2026-06-25 10:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4bf7ic4j2j...
CVE-2026-10092
creationtimestamp| type| source ---|---|--- 2026-06-24 11:50:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moztylkbsp2n 2026-06-25 05:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp3ofidjbs2q...
Mozilla Firefox ESR < 140.12
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-58 advisory. - Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird...