CVE-2026-4689

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:18+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7cxyuvt2w 2026-03-29 05:26:24+00:00| seen|...

CVE-2026-4720

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:27+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w 2026-03-29 17:00:00+00:00| seen|...

CVE-2026-4686

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:17+00:00| seen|...

CVE-2026-4697

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:21+00:00| seen|...

CVE-2026-4685

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:17+00:00| seen|...

CVE-2026-4688

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:18+00:00| seen|...

CVE-2026-4721

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:28+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w 2026-03-29 17:00:00+00:00| seen|...

CVE-2026-4691

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:18+00:00| seen|...

CVE-2026-4699

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:21+00:00| seen|...

CVE-2026-4707

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:23+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7d3b6sc2j...

CVE-2026-4690

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:18+00:00| seen|...

CVE-2026-4766

The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied gallery shortcode values. This makes ...

CVE-2026-28877

creationtimestamp| type| source ---|---|--- 2026-03-25 02:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtz7xrmze2j 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260325 2026-03-26 03:00:11+00:00| seen|...

CVE-2026-4766 Easy Image Gallery <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta

The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied gallery shortcode values. This makes ...

CVE-2026-4766

Product/Component: Easy Image Gallery WordPress plugin. Vulnerability: Stored Cross-Site Scripting via Gallery shortcode post meta, affecting all versions up to 1.5.3. Root cause: Insufficient input sanitization and output escaping on user-supplied gallery shortcode values. Impact: Authenticated ...

CVE-2026-4701

creationtimestamp| type| source ---|---|--- 2026-03-25 01:17:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtw6b4fl72h 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00|...

CVE-2026-4700

creationtimestamp| type| source ---|---|--- 2026-03-25 01:17:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtw5zg7n42c 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00|...

CVE-2026-4716

creationtimestamp| type| source ---|---|--- 2026-03-25 01:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtva2knmm2r 2026-03-25 01:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtvafbhdx2x 2026-03-25 01:17:20+00:00| seen|...

CVE-2026-4714

creationtimestamp| type| source ---|---|--- 2026-03-25 01:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtv7lkdj22m 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:25+00:00|...

SUSE CVE-2026-29191

ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via XSS in /saml-post Endpoint. This issue has been patched in version 4.12.0...