Grav < 1.7 - Open Redirect

Grav before 1.7 has an open redirect vulnerability via common/Grav.php. This is partially fixed in 1.6.23 and still present in 1.6.x. id: CVE-2020-11529 info: name: Grav 1.7 - Open Redirect author: 0xAkoko severity: medium description: Grav before 1.7 has an open redirect vulnerability via...

Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

CVE-2026-15509

creationtimestamp| type| source ---|---|--- 2026-07-12 23:30:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqidht6uyw2y 2026-07-13 00:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqifj3uwyz27 2026-07-13 03:15:07+00:00| seen|...

CVE-2026-59162

creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbfhhklg2a 2026-07-10 23:13:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdblki2rc27 2026-07-10 23:45:18+00:00| seen|...

CVE-2026-57850

creationtimestamp| type| source ---|---|--- 2026-07-10 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd26b42is2l 2026-07-11 02:14:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdlp4gial27...

CVE-2026-61450

creationtimestamp| type| source ---|---|--- 2026-07-10 16:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclzktvii26 2026-07-10 20:16:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqcxq5tkwy25 2026-07-10 23:27:04+00:00| seen|...

CVE-2026-1946

creationtimestamp| type| source ---|---|--- 2026-07-10 11:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3kha2x42k 2026-07-10 12:13:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4purzdp2c 2026-07-10 21:14:43+00:00| seen|...

CVE-2026-11827

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...

CVE-2018-20612

creationtimestamp| type| source ---|---|--- 2026-07-08 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5nug32tn2n...

Moderate: Red Hat Security Advisory: cups security update

An update for cups is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035

Bentoml OpenLLM 0.6.30 is affected by a command-injection in async_run_command (src/openllm/common.py, Model Repository Directory Name Handler). The vulnerability stems from manipulation of the cmd argument, enabling local exploitation. Public exploit details exist, and attack requires local acce...

CVE-2026-56000

creationtimestamp| type| source ---|---|--- 2026-07-08 09:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4u3zer2n2w 2026-07-08 10:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4vtpanvm2k 2026-07-08 16:45:30+00:00| seen|...

CVE-2026-56000

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent pointing into potentially reallocated memory...

CVE-2026-56000

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent pointing into potentially reallocated memory...

PT-2026-56335

Name of the Vulnerable Software and Affected Versions xorg-server versions prior to 21.2.24 xwayland versions prior to 24.1.13 Description Local attackers with an X connection can cause a Heap Use After Free, a condition where the system continues to use a memory address after it has been freed,...

DEBIAN-CVE-2026-55191

Bulletin has no description...

ROOT-APP-NPM-CVE-2022-37603 CVE-2022-37603 in @rootio/loader-utils - Patched by Root

Root has patched CVE-2022-37603 in the @rootio/loader-utils package for Root:npm. Multiple fixed versions available...

DEBIAN-CVE-2026-53588

Bulletin has no description...

DEBIAN-CVE-2026-45092

Bulletin has no description...