28452 matches found
CVE-2026-60074
Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...
CVE-2026-60074 Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check
Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...
CVE-2026-60074
The Date::Manip Perl module (versions through 6.99 ) is vulnerable to date corruption because its parse regexes use the \d shorthand, which matches the Unicode decimal digit property \p{Nd} instead of just [0-9] . When processing strings containing non-ASCII decimal digits, the module's check fun...
EUVD-2026-51124
Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...
CVE-2026-60074 Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check
Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...
CVE-2026-60074
Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...
CVE-2026-44616
creationtimestamp| type| source ---|---|--- 2026-07-30 11:35:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4y4bf4sqgchgx 2026-07-30 16:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cg5t67cdsurn4...
CVE-2026-18363
creationtimestamp| type| source ---|---|--- 2026-07-30 11:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y 2026-07-30 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24...
CVE-2026-44099
creationtimestamp| type| source ---|---|--- 2026-07-30 07:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bapsujimxsazk...
CVE-2026-11881
The Fluent Forms WordPress plugin versions prior to 6.2.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape specific form field configuration settings before they are outputted within an inline script during form rendering. An attac...
CVE-2026-11881 Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field
The Fluent Forms WordPress plugin before 6.2.6 does not sanitise and escape one of its form field configuration settings before outputting it inside an inline script when a form is rendered, which could allow users with a role as low as Contributor with delegated form-management permission, and...
CVE-2026-11881 Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field
The Fluent Forms WordPress plugin before 6.2.6 does not sanitise and escape one of its form field configuration settings before outputting it inside an inline script when a form is rendered, which could allow users with a role as low as Contributor with delegated form-management permission, and...
CVE-2026-17947
creationtimestamp| type| source ---|---|--- 2026-07-30 05:21:52+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-07-30 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvbggu3e2e 2026-08-03 10:48:34+00:00| seen|...
CVE-2026-17783
creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:59:26+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...
CVE-2025-14562
creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:51+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrumu73k2a2n...
CVE-2025-71387
creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:03+00:00| seen| https://jvn.jp/en/vu/JVNVU98815601 2026-08-30 13:33:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o...
CVE-2026-67244
creationtimestamp| type| source ---|---|--- 2026-07-30 04:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/34ezh5ocufffj 2026-08-04 14:29:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7xdfg3x2c 2026-08-05 19:37:07+00:00| seen|...
CVE-2026-1982
creationtimestamp| type| source ---|---|--- 2026-07-30 04:08:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dyvqkny6lwujo...
CVE-2026-48449
creationtimestamp| type| source ---|---|--- 2026-07-30 03:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtjzfcgkl2e 2026-07-30 04:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtkiggdyr2u 2026-07-30 14:04:22+00:00| seen|...