MINI-76HH-F334-MM2C

Bulletin has no description...

MINI-5PHJ-6FX9-93P4

Bulletin has no description...

GHSA-79RJ-F7GJ-XF33

creationtimestamp| type| source ---|---|--- 2026-06-06 22:10:54+00:00| seen| https://gist.github.com/that1guycolin/b28d5802399c42591791c416e71c66dc 2026-09-02 17:17:00+00:00| seen| https://gist.github.com/xorj/77b2b9d5ac51b19239b32c6c15fd7148 2026-10-07 10:40:28+00:00| seen|...

MINI-HM35-8QX3-CGVV

Bulletin has no description...

ECHO-4AA0-3EDE-1DD2

Bulletin has no description...

ECHO-190B-3BC7-3FEA

Bulletin has no description...

ECHO-6429-F56D-AA6A

Bulletin has no description...

ECHO-4903-5957-1873

Bulletin has no description...

ECHO-CEF4-2870-B604

Bulletin has no description...

CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, 2.5.0. This is due to the logjserrors AJAX handler being registered for unauthenticated users via...

MINI-HVRM-VVHF-2776

Bulletin has no description...

CVE-2026-37534

Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe 2025-11-30 in SAEJ1939ReadTransportProtocolDataTransfer,allows attackers to write to arbitrary memory via crafted sequence number from the CAN frame...

CVE-2025-59614

Memory Corruption when sending random number generator command with insufficient output buffer size...

CVE-2026-6399

The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.1.0. This is due to the use of sanitizetextfield for output escaping in the Contact Number adcontactnumber field — a function that strips HTML tags but does not encode...

CVE-2026-4377

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP...

CVE-2026-40296

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatted value differs from the original value. When a cell has a custom number format containing the text placeholder @ along with any additional literal...

CVE-2026-3655

The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60. This is due to the Firebase verification flow in the lwpajaxregister AJAX handler not binding the Firebase session to the phone number supplied in the...

CVE-2026-3290

Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values...

CVE-2026-6376

A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification mechanisms. This results in exposure of extensive personal, travel, and booking metadata to any unauthenticated user...

CVE-2026-2379

On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibit unexpected behavior in specific cases. Physical interface flaps and certain agent restarts can cause IPsec tunnel re-establishment with existing Security Associations, resulti...