CVE-2026-15523

creationtimestamp| type| source ---|---|--- 2026-07-13 03:27:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqiqqmy34f2d 2026-07-13 04:03:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqisqsy3vf26...

CVE-2026-15515

creationtimestamp| type| source ---|---|--- 2026-07-13 01:29:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqik4jlf3e2x 2026-07-13 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116910078363580201 2026-07-13 01:30:27+00:00| seen|...

CVE-2026-15518

A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to...

CVE-2026-15518

AREA 17 Twill CMS

CVE-2026-15518 AREA 17 Twill CMS Media Library Insert FileLibraryController.php storeFile unrestricted upload

A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to...

python313-weasyprint-69.0-1.1 on GA media (moderate)

python313-weasyprint-69.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11249-1 Rating: moderate Cross-References: CVE-2026-49452 CVSS scores: CVE-2026-49452 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

libredwg-devel-0.14.8413-1.1 on GA media (moderate)

libredwg-devel-0.14.8413-1.1 on GA media Announcement ID: openSUSE-SU-2026:11247-1 Rating: moderate Cross-References: CVE-2026-15181 CVE-2026-15184 CVE-2026-9529 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securit...

OPENSUSE-SU-2026:11262-1 sdbootutil-1+git20260713.d869cf8-1.1 on GA media

These are all security issues fixed in the sdbootutil-1+git20260713.d869cf8-1.1 package on the GA media of openSUSE Tumbleweed...

BIT-JOOMLA-2026-48947 Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints

An improper access check allows privileged users to overwrite media files without editing permissions...

OPENSUSE-SU-2026:11260-1 patch-2.8-3.1 on GA media

These are all security issues fixed in the patch-2.8-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57830

These are all security issues fixed in the libxml2-16-2.15.3-2.1 package on the GA media of openSUSE Tumbleweed...

spectre-meltdown-checker-26.36.0602723-1.1 on GA media (moderate)

spectre-meltdown-checker-26.36.0602723-1.1 on GA media Announcement ID: openSUSE-SU-2026:11242-1 Rating: moderate Cross-References: CVE-2017-5715 CVE-2017-5753 CVE-2018-3615 CVE-2018-3620 CVE-2018-3640 CVE-2019-11157 CVE-2020-0543 CVE-2020-12965 CVE-2020-8694 CVE-2021-26318 CVE-2022-21123...

xorg-x11-server-21.1.21-8.1 on GA media (moderate)

xorg-x11-server-21.1.21-8.1 on GA media Announcement ID: openSUSE-SU-2026:11244-1 Rating: moderate Cross-References: CVE-2026-55999 CVE-2026-56000 CVSS scores: CVE-2026-55999 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-55999 SUSE : 7.3...

OPENSUSE-SU-2026:11257-1 freetype2-devel-2.14.3-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11259-1 libopenbabel8-3.2.1-1.1 on GA media

These are all security issues fixed in the libopenbabel8-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

python313-Django4-4.2.30-4.1 on GA media (moderate)

python313-Django4-4.2.30-4.1 on GA media Announcement ID: openSUSE-SU-2026:11235-1 Rating: moderate Cross-References: CVE-2015-3982 CVE-2015-5145 CVE-2015-5963 CVE-2016-7401 CVE-2017-12794 CVE-2017-7233 CVE-2017-7234 CVE-2018-16984 CVE-2018-6188 CVE-2018-7536 CVE-2018-7537 CVE-2019-11358...

OPENSUSE-SU-2026:11258-1 libxml2-16-2.15.3-2.1 on GA media

These are all security issues fixed in the libxml2-16-2.15.3-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57833

These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11255-1 afterburn-5.10.0.git73.b97f772-1.1 on GA media

These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-12126

The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment 'posttitle' in all versions up to, and including, 3.7.3 due to insufficient input sanitization and output escaping. This makes it possible for...