CVE-2026-43109

creationtimestamp| type| source ---|---|--- 2026-05-06 11:34:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527415042811896 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-07-09 01:17:37+00:00| seen|...

CVE-2026-43132 dm-verity: correctly handle dm_bufio_client_create() failure

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

CVE-2026-6672

creationtimestamp| type| source ---|---|--- 2026-05-06 10:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6i676cax2p 2026-05-09 02:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlf7epospu2h...

CVE-2026-35254

creationtimestamp| type| source ---|---|--- 2026-05-06 10:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hmax7f32r...

CVE-2026-43077

creationtimestamp| type| source ---|---|--- 2026-05-06 09:59:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527041500918607 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00|...

GHSA-FG3J-5W9G-HMG7

creationtimestamp| type| source ---|---|--- 2026-05-06 07:40:29+00:00| seen| https://gist.github.com/alon710/cdeb633d740e110eed8363124062a03a...

GHSA-MGGX-P7JF-JGW4

creationtimestamp| type| source ---|---|--- 2026-05-06 07:10:29+00:00| seen| https://gist.github.com/alon710/9fc35b1e537c7d33fcc6512ec6181c7a...

CVE-2026-2306

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...

CVE-2026-7572

creationtimestamp| type| source ---|---|--- 2026-05-06 05:18:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5x7pog4m2p...

CVE-2025-71251

creationtimestamp| type| source ---|---|--- 2026-05-06 05:14:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5wxzav3o2k 2026-05-06 05:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5z5cy5xw2v 2026-05-06 19:02:57+00:00| seen|...

CVE-2026-2306 Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...

CVE-2026-2306

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...

CVE-2026-2306 Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...

CVE-2026-5753

The CVE CVE-2026-5753 concerns the All-in-One WP Migration Unlimited Extension for WordPress (versions ≤ 2.83). The root cause is Missing Authorization in Ai1wmve_Schedules_Controller::save for admin_post_ai1wm_schedule_event_save, which does not verify user capabilities before saving schedule da...

GHSA-7WW3-XVF5-CXWM

creationtimestamp| type| source ---|---|--- 2026-05-06 03:10:29+00:00| seen| https://gist.github.com/alon710/1d05503905d86d5b6619223d3f318c59...

CVE-2025-71252

creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5pkzx226 2026-05-06 05:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5xronng72o 2026-06-01 18:00:00+00:00| seen|...

CVE-2025-71255

creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5c2ntm2w 2026-05-06 05:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5zaf5wiv2i 2026-06-01 18:00:00+00:00| seen|...

SUSE CVE-2026-43013

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs mlx5lagdevaddmdev may return 0 success even when an error occurs that is handled gracefully. Consequently, the initialization flow proceeds to call mlx5ldevadddebugfs ev...

PT-2026-38294

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.48 Description Insufficient validation of reference paths in reference creation, rename, and delete operations allows attackers to write, overwrite, move, or delete files outside the repository's .git directory...

PT-2026-38229

Name of the Vulnerable Software and Affected Versions Masa CMS versions prior to 7.2.10 Masa CMS versions prior to 7.3.15 Masa CMS versions prior to 7.4.10 Masa CMS versions prior to 7.5.3 Description The createBundle function in csettings.cfc fails to properly validate anti-CSRF Cross-Site Reque...