EUVD-2026-57314

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

CVE-2026-15803

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

CVE-2018-9144

creationtimestamp| type| source ---|---|--- 2026-08-11 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msreptbbnv2o...

CVE-2018-11798

creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o 2026-08-13 08:46:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991...

Photon OS 5.0: Samba PHSA-2023-5.0-91-0063

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0063. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Patch PHSA-2024-5.0-91-0424

An update of the patch package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0424. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2018-1281

creationtimestamp| type| source ---|---|--- 2026-08-09 01:45:26+00:00| seen| https://gist.github.com/konard/1c35fbf768bf4b7952f94331be18ee5a...

Exploit for Improper Input Validation in Drupal

CVE-2018-7600 Drupalgeddon2 — Red Team Project ITSOLERA...

CLEANSTART-2026-DM31887 Security fixes in patch 2.7.6-r4

Package patch version 2.7.6-r4 fixes 1 vulnerabilities: CVE-2018-6952...

CVE-2018-7449

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:33+00:00| seen| https://t.me/CVEhub/12263 2026-07-30 00:00:59+00:00| seen| https://t.me/CVEhub/12263 2026-07-31 01:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/12263 2026-08-01 00:00:46+00:00| published-proof-of-concept|...

CVE-2018-12913

creationtimestamp| type| source ---|---|--- 2026-07-28 13:00:04+00:00| seen| https://t.me/AssasinsOfficial/231 2026-07-29 00:00:35+00:00| published-proof-of-concept| https://t.me/AssasinsOfficial/231 2026-09-02 01:00:04+00:00| seen| https://t.me/backupzxr/167 2026-09-03 00:00:59+00:00|...

003-gas-convert (1.0.1), 108-gas-convert (1.0.0) +9200 more potentially affected by CVE-2018-1002203 +2 more via unzipper (>=0.3.0, <=0.12.5)

unzipper NPM version =0.3.0, =4.3.4, =2.0.0, =3.0.0, =2.0.0, =1.0.0, =1.0.26, =0.0.80, =1.0.0-beta.1, =0.0.1, =1.0.7, =1.3.0 and more Source cves: CVE-2018-1002203, CVE-2026-17514, CVE-2026-59972 Source advisory: SNYK:JS-UNZIPPER-18365659...

Apache Struts2 S2-057 - Remote Code Execution

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible remote code execution when alwaysSelectFullNamespace is true either by user or a plugin like Convention Plugin and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace...

python313-bleach-6.4.0-1.1 on GA media (moderate)

python313-bleach-6.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11323-1 Rating: moderate Cross-References: CVE-2018-7753 CVE-2020-6802 CVE-2020-6816 CVE-2020-6817 CVE-2021-23980 CVSS scores: CVE-2021-23980 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUS...

Exploit for CVE-2018-3214

No d...

CVE-2018-12677

creationtimestamp| type| source ---|---|--- 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/80 2026-07-18 00:00:26+00:00| seen| https://t.me/makrushin/80...

CVE-2018-8726

creationtimestamp| type| source ---|---|--- 2026-07-06 02:16:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwzhtmzry2d...

CVE-2018-12984

creationtimestamp| type| source ---|---|--- 2026-06-25 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4zi42xxo2n...

CVE-2018-12993

creationtimestamp| type| source ---|---|--- 2026-06-25 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4w4tgjlu2d...

Security Bulletin: Security Vulnerabilities were found in IBM Security Verify Directory (CVE-2018-2799)

Summary Security Vulnerabilities were addressed in IBM Security Verify Directory Vulnerability Details CVEID:CVE-2018-2799 DESCRIPTION: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171,...