CVE-2026-58038

creationtimestamp| type| source ---|---|--- 2026-07-01 16:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplw6dlatg2v 2026-07-02 02:47:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzdnjc5n2q 2026-07-02 06:47:04+00:00| seen|...

CVE-2026-29090

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6j7p-qjhg-9947...

CVE-2026-53252

creationtimestamp| type| source ---|---|--- 2026-07-01 02:44:02+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:51:42+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-49049

creationtimestamp| type| source ---|---|--- 2026-06-29 16:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgui7cu3k2o 2026-07-03 17:15:04+00:00| seen| https://dnsc.ro/citeste/alerta-vulnerabilitate-exploatata-activ-in-joomla-helix3 2026-07-04 07:04:36+00:00| seen|...

CVE-2026-54369

creationtimestamp| type| source ---|---|--- 2026-06-29 15:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgs4dpc3w2o 2026-06-29 15:48:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtm5meg22t 2026-07-21 12:01:13+00:00| seen|...

CVE-2026-49336

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:44+00:00| published-proof-of-concept| https://github.com/microsoft/kiota-typescript/security/advisories/GHSA-396q-4vc8-28x9...

CVE-2026-52988

A flaw was found in the Linux kernel's netfilter component. This vulnerability involves a concurrency issue during updates to netfilter rulesets. When multiple updates occur simultaneously, improper synchronization could lead to unsafe data access during netlink dump list traversal. This could...

CVE-2026-54158

creationtimestamp| type| source ---|---|--- 2026-06-25 01:47:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3cq5vxrr2t 2026-06-25 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp3lttwe2q2w 2026-06-25 04:30:32+00:00| seen|...

CVE-2026-48708

creationtimestamp| type| source ---|---|--- 2026-06-24 18:35:07+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-7fq5-7wr8-rjwj 2026-06-24 19:54:03+00:00| seen| https://gist.github.com/alon710/cb59405487e5944ed006860e5bc630ab 2026-06-24...

CVE-2026-53080

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of "old" filters before change Like pointed out by Sashiko 1, since commit ed76f5edccc9 "net: sched: protect filterchain list with filterchainlock mutex" TC filters are added to a shared blo...

MINI-GGPQ-5R8V-Q62J

Bulletin has no description...

Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

The optional Paragraphs Library module allows the reuse of paragraphs in multiple places. The module doesn't sufficiently restrict access to unpublished library items in lists. This vulnerability is mitigated by the fact the paragraphslibrary module must be in use, and that an attacker must have...

postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication

A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...

postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication

A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...

postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication

A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...

postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication

A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...

Insertion of Sensitive Information into Log File

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the error handling process for certain API and WebSocket routes, where unsanitized exception...

postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication

A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...

postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication

A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...

Malicious code in nottuff23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d429b099904a530f5dc4dfdd4724b7b6160c1de1330e0b103e8b8e3c737dfd The package is one of approximately 100 identically-named-pattern publishes from an automated bulk-publish operation. The tarball ships...