12940 matches found
CVE-2026-77051
creationtimestamp| type| source ---|---|--- 2026-09-14 21:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvizhwnh7o25...
CVE-2026-89461
creationtimestamp| type| source ---|---|--- 2026-09-14 21:10:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117271442317769675 2026-09-14 21:20:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvj225kb6b2b...
EUVD-2026-78151
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...
CVE-2026-65405
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to determine kernel memory layout...
CVE-2026-73579
creationtimestamp| type| source ---|---|--- 2026-09-14 20:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mviye4g4v42f...
CVE-2026-86890
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...
EUVD-2026-77961
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...
CVE-2026-86460
creationtimestamp| type| source ---|---|--- 2026-09-14 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvixs7dzwu2r...
CVE-2026-16432
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...
CVE-2026-54246 Skipper routesrv-no-auth: All routesrv API Endpoints Lack Authentication
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv component serves cluster-wide control-plane data without application-layer authentication through /routes, /routes/zone, /swarm/redis/shards, and /swarm/valkey/shards. The handlers registered in...
CVE-2026-80970
creationtimestamp| type| source ---|---|--- 2026-09-14 19:40:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117271088410097624 2026-09-14 19:50:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mviuyshahy2m...
CVE-2026-17467 Vulnerabilities exists in IBM Cloud Pak for Data System
IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...
CVE-2026-18065 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i...
USN-8739-2 imagemagick vulnerabilities
USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue...
CVE-2026-57579
Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...
CVE-2026-57579 Alchemy: Unauthenticated nested page API leaks restricted & unpublished content
Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...
CVE-2026-82434
creationtimestamp| type| source ---|---|--- 2026-09-14 16:07:58+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mviilkxi7d2y 2026-09-14 16:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvijbcflqb2n 2026-09-14 16:25:32+00:00| seen|...
CVE-2026-91001
creationtimestamp| type| source ---|---|--- 2026-09-14 15:49:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117270181306657011 2026-09-15 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117273527976059635 2026-09-15 06:00:29+00:00| seen|...
CVE-2026-90961
creationtimestamp| type| source ---|---|--- 2026-09-14 15:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvifvz2uiq2g 2026-09-14 16:07:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mviikrvwar2p...