CVE-2026-13903 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15186 macrozheng mall Portal Endpoint create resource injection

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...

CVE-2026-9237

creationtimestamp| type| source ---|---|--- 2026-07-09 12:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lkdz3y62k...

CVE-2026-22927

creationtimestamp| type| source ---|---|--- 2026-07-09 05:50:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116888450705839903 2026-08-05 08:27:26+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3msd47cgijk2y...

CVE-2026-57024

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:18+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709...

CVE-2026-57019

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:06+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709 2026-07-09 16:45:29+00:00| seen|...

CVE-2026-15122

creationtimestamp| type| source ---|---|--- 2026-07-09 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CVE-2026-54784

creationtimestamp| type| source ---|---|--- 2026-07-09 01:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hv3t6nv2i...

Linux Distros Unpatched Vulnerability : CVE-2026-59871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript...

TencentOS Server 4: evince (TSSA-2026:0539)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0539 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-15111

creationtimestamp| type| source ---|---|--- 2026-07-08 23:27:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116886944513818457 2026-07-09 04:45:13+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CVE-2026-58494

creationtimestamp| type| source ---|---|--- 2026-07-08 22:25:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65xk6ywk2g...

CVE-2026-15172 Unchecked Input for Loop Condition in Wireshark

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-0276

creationtimestamp| type| source ---|---|--- 2026-07-08 19:03:30+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq5sow2ip32c 2026-07-10 00:15:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-0276...

CVE-2026-60125

creationtimestamp| type| source ---|---|--- 2026-07-08 16:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ipsgfyo2w...

CVE-2026-59703 repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint

repomix contains a local file inclusion vulnerability in the git clone endpoint that allows unauthenticated attackers to read arbitrary local git repositories. The isValidRemoteValue function in src/core/git/gitRemoteParse.ts fails to block file:// URLs, permitting attackers to supply file://...

CVE-2026-54406

creationtimestamp| type| source ---|---|--- 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-09 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqaif74m6425...

CVE-2026-14482

creationtimestamp| type| source ---|---|--- 2026-07-08 07:27:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4lrjxew42l 2026-07-09 00:00:40+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq6dcbzxg52n...

CVE-2026-12936

creationtimestamp| type| source ---|---|--- 2026-07-08 06:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4hspcfea2p...

CVE-2026-9701

creationtimestamp| type| source ---|---|--- 2026-07-08 04:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4d4g7zbx2q 2026-07-08 06:00:09+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq4gw5xwgz2x 2026-07-08 07:22:03+00:00| seen|...