OpenClaw Backlink Vulnerability (CNVD-2026-14858)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a backlink vulnerability that can be exploited by an attacker to read arbitrary files outside the boundaries of the configuration workspace...

PT-2026-27370

Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET parameter. Attackers can send crafted requests to news details.php, jobs details.php, or job cmp details.php with malicious...

CVE-2026-32066

This CVE ID has been rejected...

CVE-2026-32047

This CVE ID has been rejected...

Missing Default Case in Switch Statement

Overview Affected versions of this package are vulnerable to Missing Default Case in Switch Statement in the DataChangeNotification process due to a nil pointer dereference. An attacker can cause a panic and disrupt service availability by triggering this process with crafted input. Remediation...

Missing Default Case in Switch Statement

Overview Affected versions of this package are vulnerable to Missing Default Case in Switch Statement in the DataChangeNotification process due to a nil pointer dereference. An attacker can cause a panic and disrupt service availability by triggering this process with crafted input. Remediation...

Google Chrome Memory Error Vulnerability (CNVD-2026-29297)

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a memory corruption vulnerability that allows attackers to cause heap corruption...

CVE-2026-4530

creationtimestamp| type| source ---|---|--- 2026-03-21 23:59:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmafmfmzm24...

CVE-2026-33164

creationtimestamp| type| source ---|---|--- 2026-03-20 22:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjlin3l7f2z 2026-03-23 21:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqxdxdy5g2s...

CVE-2026-33124

creationtimestamp| type| source ---|---|--- 2026-03-20 13:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimwht7w52u...

OESA-2026-1683 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib. An integer...

CVE-2026-31998

creationtimestamp| type| source ---|---|--- 2026-03-20 05:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhsj4wzoq2a...

Fixed in Apache Tomcat 11.0.20

Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 021d1f83. This issue was reported to the Tomcat security team o...

CVE-2026-32014

creationtimestamp| type| source ---|---|--- 2026-03-19 23:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhh47eqo2q2s 2026-03-24 00:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhrdmesoz42q 2026-08-15 11:00:03+00:00| published-proof-of-concept|...

CVE-2026-33302

creationtimestamp| type| source ---|---|--- 2026-03-19 22:10:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgzfigezw2n...

EUVD-2026-13126

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

CVE-2026-32867

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

CVE-2026-32869 OPEXUS eComplaint and eCASE XSS via Name of Organization field

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

CVE-2026-32869

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

CVE-2026-32869

CVE-2026-32869 affects OPEXUS eComplaint and eCASE prior to 10.2.0.0. The issue is improper sanitization of the Name of Organization field in case information, allowing an authenticated attacker to inject an XSS payload executed in the victim’s session when visiting the case information page. The...