CVE-2026-73347

creationtimestamp| type| source ---|---|--- 2026-08-19 15:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth2dxahnq2e...

gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR High Dynamic Range files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file,...

CVE-2026-19490

creationtimestamp| type| source ---|---|--- 2026-08-19 13:38:22+00:00| seen| https://bsky.app/profile/samilaiho.com/post/3mtgu422mv22l 2026-08-19 15:10:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgza5tnvr2m 2026-08-19 15:23:22+00:00| seen|...

CVE-2026-74402

A flaw was found in the Linux kernel's atmel-sha204a cryptographic hardware random number generator HWRNG driver. Improper buffer management in both blocking and non-blocking paths causes the driver to fail in providing valid entropy. This occurs because the buffer is read starting from byte 1, a...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified several vulnerabilities in the Oracle Commerce Platform version 11.4.0. These vulnerabilities allow unauthorized attackers with network access to perform critical actions without authentication. This includes gaining unauthorized access to sensitive data, modifying, deleting...

CVE-2026-15446 EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content

The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15421

The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-78493

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

ROS-20260819-73-0044

The vulnerability in perl-Image-ExifTool is related to insufficient neutralization of special elements in the request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-78522

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...

CVE-2026-70855

creationtimestamp| type| source ---|---|--- 2026-08-18 22:21:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfauukqmo2e 2026-08-19 06:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg5c5i2ru23 2026-08-19 17:48:06+00:00| seen|...

CVE-2026-62626

creationtimestamp| type| source ---|---|--- 2026-08-18 22:18:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaomzxms2b 2026-08-19 04:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfwljbyl32e 2026-08-19 17:19:46+00:00| seen|...

CVE-2026-62588

creationtimestamp| type| source ---|---|--- 2026-08-18 22:16:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfalacoa72p 2026-08-19 03:40:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfsof32zy2f 2026-08-19 17:45:57+00:00| seen|...

CVE-2026-62544

creationtimestamp| type| source ---|---|--- 2026-08-18 22:15:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfakgn7oe2u 2026-08-19 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4h5k2r2t 2026-08-19 17:48:30+00:00| seen|...

CVE-2026-61034

creationtimestamp| type| source ---|---|--- 2026-08-18 22:13:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfagbk7z72p 2026-08-19 02:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfn3korbo2j 2026-08-19 17:17:06+00:00| seen|...

CVE-2026-55211

creationtimestamp| type| source ---|---|--- 2026-08-18 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf6knhztq25...

CVE-2026-71036

Oracle Commerce version 11.4.0 Experience Manager component is vulnerable to an unauthenticated, network-accessible attack (CVSS 9.1) allowing full confidentiality and integrity compromise. Oracle's August 2026 CPU advisory provides patch details; no exploitation evidence is present in the provid...

CVE-2026-71031

...

CVE-2026-71018

Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable: unauthenticated remote attackers can exploit it via HTTP to read all accessible data and modify some data, requiring victim interaction; CVSS 3.1 score 8.2 (High). No specific root cause or patch details are provided. No known ...

CVE-2026-71011

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...