CVE-2026-4873

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...

CVE-2026-4782

creationtimestamp| type| source ---|---|--- 2026-05-13 12:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqdbejomm2v 2026-05-13 14:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlqjfyf55y2h 2026-05-14 00:44:08+00:00| seen|...

CVE-2026-0265

creationtimestamp| type| source ---|---|--- 2026-05-13 10:50:42+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-462 2026-05-13 19:03:35+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mlqylasqg32u 2026-05-13 20:00:00+00:00| seen|...

CVE-2026-2291

creationtimestamp| type| source ---|---|--- 2026-05-13 07:08:33+00:00| seen| https://bsky.app/profile/kompetenztraining.bsky.social/post/3mlpqmwyz5d2n 2026-05-13 12:31:36+00:00| seen| https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc 2026-06-01 09:00:04+00:00| seen|...

CVE-2017-3109

creationtimestamp| type| source ---|---|--- 2026-05-13 05:25:01+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlpktscrwu26...

CVE-2026-7051 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0. This is due to a missing ownership verification in the B2SPostTools::deleteUserPublishPost and B2SPostTools::deleteUserSchedPost functions,...

EUVD-2026-29899

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0. This is due to a missing ownership verification in the B2SPostTools::deleteUserPublishPost and B2SPostTools::deleteUserSchedPost functions,...

CVE-2026-7051

The CVE-2026-7051 entry concerns the Blog2Social WordPress plugin (versions up to 8.9.0) with a Missing Authorization issue. The root cause is missing blog_user_id constraints in B2S_Post_Tools::deleteUserPublishPost() and deleteUserSchedPost(), allowing an authenticated subscriber+ to delete oth...

CVE-2026-7051 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0. This is due to a missing ownership verification in the B2SPostTools::deleteUserPublishPost and B2SPostTools::deleteUserSchedPost functions,...

CVE-2026-8336

After invoking $internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine through $where, $function, mapreduce reduce stage, etc. is used also in...

CVE-2026-44260

creationtimestamp| type| source ---|---|--- 2026-05-13 03:46:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpfd2cuim2q...

SUSE CVE-2026-43469

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement rereceiving on the early exit paths In the event that rpcrdmapostrecvs fails to create a work request due to memory allocation failure, say or otherwise exits early, we should decrement ep-rereceiving before...

CVE-2026-45227

creationtimestamp| type| source ---|---|--- 2026-05-13 03:14:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdjs5yyz2n...

CVE-2026-42854

creationtimestamp| type| source ---|---|--- 2026-05-13 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlpcre43d72l 2026-05-13 03:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116565031474718182 2026-05-22 07:07:08+00:00| seen|...

CVE-2026-44352

creationtimestamp| type| source ---|---|--- 2026-05-13 01:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp75lscub2e...

CVE-2026-44347

creationtimestamp| type| source ---|---|--- 2026-05-13 01:17:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp4znj3va2h...

CVE-2026-26083

creationtimestamp| type| source ---|---|--- 2026-05-13 00:36:56+00:00| seen| https://bsky.app/profile/tamosan.bsky.social/post/3mlp2qnfq3skj 2026-05-13 18:30:06+00:00| seen| https://t.me/truesecator/8200 2026-05-14 00:08:08+00:00| seen|...

CVE-2026-8202 Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators

Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time. This issue impacts MongoDB Server v7.0 versions prior to...

CVE-2026-8202 Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators

Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time. This issue impacts MongoDB Server v7.0 versions prior to...

CVE-2026-8336 Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands

After invoking $internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine through $where, $function, mapreduce reduce stage, etc. is used also in...