28451 matches found
CVE-2026-16267
The Newsletters WordPress plugin versions prior to 4.16 is vulnerable to PHP Object Injection . The root cause is the failure to restrict allowed classes when unserialising values received from public form submissions, specifically via a date form field . This allows unauthenticated attackers to ...
cvelistV5 cve_2026-08-08_0000Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
CVE-2026-20339
creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 11:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h 2026-08-08 18:09:47+00:00| seen|...
CVE-2022-4995
Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...
CVE-2026-52021
creationtimestamp| type| source ---|---|--- 2026-08-07 14:32:36+00:00| seen| https://gist.github.com/itsmohitnarayan/e456399f083130962bab6c710f208437...
CVE-2026-17626
creationtimestamp| type| source ---|---|--- 2026-08-07 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msimra6igd2r...
cvelistV5 cve_2026-08-07_1100Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
CVE-2026-38053
creationtimestamp| type| source ---|---|--- 2026-08-07 10:12:54+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8 2026-08-08 00:17:13+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8...
GHSA-HQ66-CQWQ-W95J
creationtimestamp| type| source ---|---|--- 2026-08-07 07:36:22+00:00| seen| https://gist.github.com/alon710/49e34188f9c47f29b61522ee6a9c6906...
CVE-2026-19189
creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...
kev-yardstick-audit
How late is the yardstick? Auditing the CISA KEV catalog as gr...
CVE-2026-62830
creationtimestamp| type| source ---|---|--- 2026-08-07 02:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhjldhws2z 2026-08-08 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msk5ewdujy23 2026-08-11 19:00:41+00:00| seen|...
CVE-2026-64638
creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...
cvelistV5 cve_2026-08-06_1400Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Date Block
Description Gutenberg does not escape a block attribute before outputting it in an HTML attribute context, which could allow users with a role of Contributor and above to perform Stored Cross-Site Scripting attacks against anyone viewing the affected post. The affected block ships both in the...
Fedora 43 : php (2026-d755ca77c4)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d755ca77c4 advisory. PHP version 8.4.24 30 Jul 2026 BCMath: Fixed GHSA-x692-q9x7-8c3f Out-of-bounds write in bccomp. CVE-2026-17544 Recep Asan Calendar: Fixed bug GH-226...
SUSE CVE-2026-69240
Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. In the Oracle dialect, when val is a string and starts wit...
GHSA-957R-QF9P-67XW
creationtimestamp| type| source ---|---|--- 2026-08-06 22:32:31+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7 2026-08-07 00:05:24+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7...