CVE-2026-1287

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-13 00:46:46+00:00| seen|...

CVE-2025-71180

creationtimestamp| type| source ---|---|--- 2026-01-31 14:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115990172209554146 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2026-1637

creationtimestamp| type| source ---|---|--- 2026-01-29 19:41:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115980086235727489 2026-01-30 02:05:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdm7ny4xlv2t...

ECHO-C16B-48D0-7DA6

Bulletin has no description...

ECHO-EA09-CCA5-BA23

Bulletin has no description...

CVE-2025-41726

creationtimestamp| type| source ---|---|--- 2026-01-27 11:38:25+00:00| seen| https://infosec.exchange/users/certvde/statuses/115966863286149942 2026-01-27 11:38:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mdfobyoxp2c2 2026-01-27 12:02:48+00:00| seen|...

CVE-2018-14851

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

CVE-2026-24830

creationtimestamp| type| source ---|---|--- 2026-01-27 10:05:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115966496664593357 2026-01-27 10:27:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkcuouhg2m 2026-01-27 12:25:53+00:00| seen|...

CVE-2026-1414 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/getInformation of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead...

CVE-2026-23012

creationtimestamp| type| source ---|---|--- 2026-01-25 15:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdaz7qfiv62i 2026-01-25 15:34:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115956467313120586...

GHSA-X7V4-P4G4-F7V7

creationtimestamp| type| source ---|---|--- 2026-01-24 22:43:36+00:00| seen| https://gist.github.com/alon710/65d6df2ffba06917264d834b93896938...

GHSA-PC9J-5V36-2MWW

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:36+00:00| seen| https://gist.github.com/alon710/4168158bdc42a1017e72ec3633e1f2e1 2026-01-24 22:41:58+00:00| seen| https://gist.github.com/alon710/c011c67fa0cae97680cf3718a4db61e5...

EUVD-2026-4564

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-4579

The GZSEO plugin for WordPress is vulnerable to authorization bypass leading to Stored Cross-Site Scripting in all versions up to, and including, 2.0.11. This is due to missing capability checks on multiple AJAX handlers combined with insufficient input sanitization and output escaping on the...

EUVD-2026-4569

The Cookie consent for developers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple settings fields in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-4581

The Alchemist Ajax Upload plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability check on the 'deletefile' function in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary WordPress media...

EUVD-2026-4576

The Simple Crypto Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2. This is due to missing nonce validation on the scsbackend function. This makes it possible for unauthenticated attackers to update plugin settings via a forged...

EUVD-2026-4587

Not used...

EUVD-2026-4595

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

EUVD-2026-4286

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download an...