1155 matches found
CVE-2026-70702
...
CVE-2026-62638
Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...
CVE-2026-62553
...
CVE-2026-62500
...
CVE-2026-61302
...
CVE-2026-60991
Oracle Identity Manager Connector (Core component, versions 12.2.1.4.0 and 14.1.2.1.0) has an easily exploitable local vulnerability allowing low-privileged attackers to fully compromise the product; Oracle's August 2026 CPU addresses it — apply patches from https://www.oracle.com/security-alerts...
CVE-2026-60970
...
CVE-2026-60759
...
CVE-2026-19500
creationtimestamp| type| source ---|---|--- 2026-08-18 18:55:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtevf6ucex2r 2026-08-20 03:00:05+00:00| seen| Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI 2026-08-20 03:00:05+00:00| seen|...
CVE-2026-73356
creationtimestamp| type| source ---|---|--- 2026-08-18 18:09:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtesscgqlf26...
NPM: MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
NPM: MagicMirror socket payload secret placeholder expansion can disclose SECRET environment variables vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...
CVE-2026-63640 MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/nodehelper.js passes every inbound object payload through replaceSecretPlaceholder in js/serverfunctions.js before invoking...
EUVD-2026-61079
MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/nodehelper.js passes every inbound object payload through replaceSecretPlaceholder in js/serverfunctions.js before invoking...
CVE-2026-63640 MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/nodehelper.js passes every inbound object payload through replaceSecretPlaceholder in js/serverfunctions.js before invoking...
CVE-2026-73355
creationtimestamp| type| source ---|---|--- 2026-08-18 16:09:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem3t2qux2c 2026-08-18 17:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtephsq4vg2f 2026-08-21 04:00:04+00:00| seen|...
CVE-2026-66633
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...
CVE-2026-12004
creationtimestamp| type| source ---|---|--- 2026-08-18 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtebvequaa23...
CVE-2026-23937
creationtimestamp| type| source ---|---|--- 2026-08-18 12:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ylxg2k26...
CVE-2026-75854
creationtimestamp| type| source ---|---|--- 2026-08-18 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117116398789961703 2026-08-18 12:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mte666epzm2n 2026-08-18 12:30:04+00:00| seen|...