CVE-2026-46170

creationtimestamp| type| source ---|---|--- 2026-07-01 02:34:35+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630...

MINI-467M-4P6J-5C2Q

Bulletin has no description...

MINI-2PM6-76HH-8PG5

Bulletin has no description...

CVE-2026-57149

creationtimestamp| type| source ---|---|--- 2026-07-01 00:05:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpk7teoycm2k...

PT-2026-54484

Name of the Vulnerable Software and Affected Versions UltraVNC repeater versions prior to 1.8.2.3 Description An integer overflow exists in the HTTP request logging path. The win log function allocates list nodes using a calculation based on the length of the HTTP request URI. If the URI length i...

PT-2026-54868

Name of the Vulnerable Software and Affected Versions OPNsense versions prior to 26.1.11 OPNsense versions prior to 26.4.1p1 Description An arbitrary file write flaw allows for remote code execution with root privileges. Recommendations Update to version 26.1.11. Update to version 26.4.1p1...

PT-2026-54736

Name of the Vulnerable Software and Affected Versions Guardian language-system affected versions not specified Description An authenticated attacker can perform error-based SQL injection to extract database contents. The issue occurs because the application passes the id GET parameter directly in...

PT-2026-54777

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description A path traversal issue exists in the tar-extraction helper function ensureLinkPath within content/file/utils.go. The function validates that a hardlink target resolves inside the extraction base but...

CVE-2026-50003

creationtimestamp| type| source ---|---|--- 2026-06-30 22:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3ooy4n423 2026-07-01 02:36:40+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01 2026-07-02 20:45:13+00:00| seen|...

CVE-2026-54512

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

CVE-2026-11595

CVE-2026-11595 affects IBM WebSphere Application Server 9.0 and 8.5. The IBM Security Bulletin describes a path traversal vulnerability in the administrative console’s integrated help system that could allow a remote attacker to obtain sensitive information. Affected products/versions include Web...

MINI-WGW2-XXR9-86R9

Bulletin has no description...

MINI-WRHG-374G-8637

Bulletin has no description...

CVE-2026-58373

creationtimestamp| type| source ---|---|--- 2026-06-30 18:35:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjngbgrb32m 2026-07-03 10:06:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcewhilr2o 2026-07-03 10:07:13+00:00| seen|...

CVE-2026-58170

creationtimestamp| type| source ---|---|--- 2026-06-30 18:21:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmmnwag72v 2026-07-02 05:58:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2eai7z2m...

CVE-2026-58377

creationtimestamp| type| source ---|---|--- 2026-06-30 17:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlfnxyxp2d 2026-07-02 05:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2y63yj22...

CGA-C2WP-F5W8-P8P5

Bulletin has no description...

EUVD-2026-40361

CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.getqueryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing checkobjectpermissions call on the parentid query parameter ...

CVE-2026-58373 CVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existence

CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.getqueryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing checkobjectpermissions call on the parentid query parameter ...

CVE-2026-58171 Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier

Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in rundir agent/src/swarm/store.py. A crafted run identifier supplied through the MCP swarm tools causes the application to read arbitrary...