1943 matches found
RHEL 9 : nginx (RHSA-2026:17792)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:17792 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...
CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1
CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...
CVE-2026-1322
creationtimestamp| type| source ---|---|--- 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260515 2026-05-18 01:19:14+00:00| seen| https://gist.github.com/MarisollieNULL/b7806963ce981e6e0f6a6d25ed3ecd8a 2026-05-18 11:49:46+00:00| seen|...
CVE-2026-42934
creationtimestamp| type| source ---|---|--- 2026-05-14 17:00:08+00:00| seen| https://t.me/truesecator/8204 2026-05-19 08:05:32+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-nginx-leading-remote-code-execution-and-allowing-rate 2026-08-15 08:00:08+00:00| seen|...
CVE-2026-45205
creationtimestamp| type| source ---|---|--- 2026-05-14 13:37:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlswsrti7k2q 2026-05-15 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mlvapkf3un2a 2026-08-10 13:20:13+00:00| seen|...
CVE-2026-6512 InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters
The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete...
CVE-2026-1630
creationtimestamp| type| source ---|---|--- 2026-05-14 06:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-1630...
CVE-2026-32993
creationtimestamp| type| source ---|---|--- 2026-05-14 02:39:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlrs2pcsib2w 2026-05-20 06:20:46+00:00| seen| https://www.acn.gov.it/portale/w/cpanel-whm-e-wp-squared-poc-pubblico-per-lo-sfruttamento-della-cve-2026-29205...
Linux Distros Unpatched Vulnerability : CVE-2026-6473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write...
WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI Date: 3/30/2026 Exploit Author: bootstrapbool Vendor Homepage: https://supsystic.com/plugins/contact-form-plugin/ Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/ Version: str: try: res = requests.geturl...
CVE-2026-42853
creationtimestamp| type| source ---|---|--- 2026-05-13 19:29:14+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-hcwq-x9fw-8cfq 2026-06-12 22:43:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4sqe3uag2q...
CVE-2026-0250
creationtimestamp| type| source ---|---|--- 2026-05-13 19:03:32+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mlqyl4hz4x23 2026-05-13 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities20260514 2026-05-13 21:00:00+00:00| seen...
BELL-CVE-2026-39823
Bulletin has no description...
CVE-2026-46339
creationtimestamp| type| source ---|---|--- 2026-05-13 13:15:48+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj 2026-07-15 06:00:04+00:00| confirmed|...
CVE-2026-44874
creationtimestamp| type| source ---|---|--- 2026-05-12 22:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlovchzeil2k...
CVE-2026-7820
A flaw was found in pgadmin4. pgAdmin enforces MAXLOGINATTEMPTS only inside its custom /authenticate/login view. Flask-Security's default /login view, which is registered automatically by security.initapp and is reachable on every server, never consulted the User.locked field: pgAdmin's User mode...
CVE-2026-7815
A flaw was found in pgadmin4. Four user-supplied JSON fields bufferusagelimit, vacuumparallel, vacuumindexcleanup, reindextablespace were concatenated directly into the rendered VACUUM/ANALYZE/REINDEX command and passed to psql --command. An authenticated user with the toolsmaintenance permission...
CVE-2026-32175 .NET Core Tampering Vulnerability
...
CVE-2026-32170
Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.