24404 matches found
CVE-2026-56145
CVE-2026-56145 describes an Elasticsearch vulnerability of uncontrolled resource consumption (CWE-400) leading to denial of service via excessive memory allocation (CAPEC-130). A low-privileged authenticated user who can execute EQL sequence queries against an index they control can craft queries...
CVE-2026-53027
creationtimestamp| type| source ---|---|--- 2026-07-21 19:40:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksc4abk2n 2026-07-21 19:40:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksct2qk2n 2026-07-24 13:25:25+00:00| seen|...
CVE-2026-16361
creationtimestamp| type| source ---|---|--- 2026-07-21 19:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6k4uz5j62u 2026-07-22 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 23:36:04+00:00| see...
CVE-2026-28309
creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afo2iiy2z 2026-08-11 16:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mssyost5x22h...
CVE-2026-16407
creationtimestamp| type| source ---|---|--- 2026-07-21 13:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xrbvh322s 2026-07-22 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 19:30:05+00:00| seen|...
CVE-2026-16404
creationtimestamp| type| source ---|---|--- 2026-07-21 13:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xhr2hqm27 2026-07-22 04:47:43+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 07:47:10+00:00| seen|...
GHSA-Q5FW-VPQC-FGPH
creationtimestamp| type| source ---|---|--- 2026-07-21 13:18:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vhspcma2g...
SUSE CVE-2026-64029
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with eventinput sequmpprocessevent borrows client-outrfile.output without synchronizing with the first-open and last-close transition in sequmpclientopen and sequmpclientclose. The last...
SUSE CVE-2026-64106
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that...
SUSE CVE-2026-64164
In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic context in btrfssyncfile The trace event btrfssyncfile is called in an atomic context all trace events are and its call to dput, which is needed due to the call to dgetparent, can...
CVE-2026-15370
creationtimestamp| type| source ---|---|--- 2026-07-21 10:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lqxtnyr2i...
GHSA-9HW9-CH79-4VH6
creationtimestamp| type| source ---|---|--- 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...
CVE-2026-6952
creationtimestamp| type| source ---|---|--- 2026-07-21 06:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr567bvu472a...
CVE-2026-15782
The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...
EUVD-2026-46155
The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...
GHSA-V422-HMWV-36X6
creationtimestamp| type| source ---|---|--- 2026-07-21 05:31:05+00:00| seen| https://gist.github.com/alon710/b2e2ae2f4c7c5ec01435305f8e986e39...
GHSA-8MV7-9C27-98VC
creationtimestamp| type| source ---|---|--- 2026-07-21 03:31:30+00:00| seen| https://gist.github.com/alon710/3baf3d34c51a96bcd4a3b1906aa0d17c...
PT-2026-62124
The CONFIG USERSPACE syscall verifier z vrfy k poll in kernel/poll.c allocates a kernel-side copy of the user-supplied k poll event via z thread malloc and then validates each event's object handle. Before this fix, validation used K OOPSK SYSCALL OBJ... inline inside the loop, which kills the...