CVE-2026-50882

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:51+00:00| seen| https://gist.github.com/pyuysig/e5b8c018b2d323b0b4ddffb9ebce9a80...

CVE-2026-50871

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:36+00:00| seen| https://gist.github.com/pyuysig/01f00b5d7575f5a776b1f132ef9ecb46...

CVE-2026-39197

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:32+00:00| seen| https://gist.github.com/pyuysig/221e90dd598ab3f3c3100ae59db8e8d4...

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in jsonnetfetcher.go‎ that may expose the Kubernetes service account token of the Grafana Operator manager to users with sufficient privileges to create Dashboard or LibraryPanel resources. This token can be used to...

CVE-2026-54164

creationtimestamp| type| source ---|---|--- 2026-06-13 05:28:06+00:00| seen| https://bsky.app/profile/soyuka.me/post/3mo5jhr2ux22s 2026-07-02 11:57:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny46qtik2u 2026-08-07 17:31:49+00:00| seen|...

CVE-2009-0014

creationtimestamp| type| source ---|---|--- 2026-06-13 05:17:38+00:00| seen| https://mastodon.bsd.cafe/users/grahamperrin/statuses/116741102400640422...

CVE-2026-54230 Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the ONOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and...

CVE-2026-53836

creationtimestamp| type| source ---|---|--- 2026-06-13 01:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo55nx4j3y2q 2026-06-16 01:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moembwzxqy2m...

CVE-2026-48165

creationtimestamp| type| source ---|---|--- 2026-06-12 23:12:00+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo4uhdc5ui2o 2026-06-16 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mogqzcvdi22e 2026-07-10 15:57:35+00:00| seen|...

CVE-2026-12129

creationtimestamp| type| source ---|---|--- 2026-06-12 23:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4u3tkkca2p...

CVE-2026-45085

creationtimestamp| type| source ---|---|--- 2026-06-12 22:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4tay2v4s2x...

CVE-2026-45013

creationtimestamp| type| source ---|---|--- 2026-06-12 22:34:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4sdo46cm2j...

CVE-2026-47138

creationtimestamp| type| source ---|---|--- 2026-06-12 21:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4o75lknj2t...

CVE-2026-45085

CVE-2026-45085 affects Discourse with the chat plugin (calendar-capable variant also involved). The issues span four authorization/disclosure problems observed in versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1. They include:...

EUVD-2026-36558

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, four authorization/disclosure issues in the chat plugin one also involving discourse-calendar: read-only category users...

CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

EUVD-2026-35391

TYPO3 CMS has Broken Access Control in its Form Framework...

CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

EUVD-2026-36552

A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not remove a user-supplied id field before saving the submitted data. In CakePHP, supplying a primary key in the save data can cause a create followed by save...

CVE-2026-54360

CVE-2026-54360 affects MISP: the mass assignment in the sharing group creation flow (SharingGroupsController::add) allows an authenticated user to submit an existing group’s id, causing a create() followed by save() to update that group. This could enable takeover or alteration of sharing groups ...