CVE-2026-15780

creationtimestamp| type| source ---|---|--- 2026-08-19 09:46:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtgh5zrnfb2n 2026-08-19 11:05:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtgll2is6q25 2026-08-19 11:06:12+00:00| seen|...

CVE-2026-58088

creationtimestamp| type| source ---|---|--- 2026-08-19 09:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eokjahqry7yos 2026-08-19 12:15:13+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58088...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified several vulnerabilities in the Oracle Commerce Platform version 11.4.0. These vulnerabilities allow unauthorized attackers with network access to perform critical actions without authentication. This includes gaining unauthorized access to sensitive data, modifying, deleting...

CGA-29P3-6V6W-VFRR

Bulletin has no description...

BIT-MONGOOSE-2026-73562 Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and 9.7.2, passing a user-controlled update such as MyModel.updateOnefilter, req.body can exploit Mongoose update casting with a proto.x dotted path under $set...

DEBIAN-CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

ECHO-64F1-9158-8F37

Bulletin has no description...

CVE-2026-6368

creationtimestamp| type| source ---|---|--- 2026-08-19 08:09:54+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mtgbqtkneu2h...

MINI-JX6G-26JR-23WJ

Bulletin has no description...

MINI-GXHH-X4C6-M2J4

Bulletin has no description...

MINI-R3J6-6348-5HPW

Bulletin has no description...

MINI-MM7X-HFWM-3GQH

Bulletin has no description...

MINI-C9JR-63MV-V6FW

Bulletin has no description...

MINI-7HJ6-FJ7J-X7C9

Bulletin has no description...

MINI-24M3-7GVF-6572

Bulletin has no description...

MINI-MGX7-P26J-XJ75

Bulletin has no description...

CVE-2026-70980

creationtimestamp| type| source ---|---|--- 2026-08-19 07:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtga3iytc32e 2026-08-19 16:47:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-26 00:37:07+00:00| seen|...

CGA-RVV4-GFJ5-24QV

Bulletin has no description...

CVE-2026-19055

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator...

CVE-2026-14287

The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...