EUVD-2025-209595

Improper Restriction of XML External Entity Reference vulnerability in Connext Professional Core Libraries allows Serialized Data External Linking.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3....

MINI-329M-XFPR-3PV4

Bulletin has no description...

CVE-2026-0206

creationtimestamp| type| source ---|---|--- 2026-04-30 13:55:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkprcb5i6n2c 2026-05-01 02:58:40+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mkr52zptik2e 2026-07-21 04:00:07+00:00| seen|...

CVE-2026-37525

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:16+00:00| seen| https://gist.github.com/sgInnora/8526eedcfd826d05ef1fc45d8f405643...

CVE-2026-37505

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:12+00:00| seen| https://gist.github.com/sgInnora/1330e1a82caa79906eec55eeff2c99b9...

MINI-F8GH-JFJR-4P2F

Bulletin has no description...

MINI-F4PC-R8G8-GPPR

Bulletin has no description...

MINI-JX26-2WHC-5QJH

Bulletin has no description...

PT-2026-36190

Name of the Vulnerable Software and Affected Versions IBM Langflow Desktop versions 1.0.0 through 1.8.4 Description An unauthenticated user can view images belonging to other users. This is possible due to an indirect object reference through a user-controlled key. Recommendations At the moment,...

Amazon Linux 2 : rclone, --advisory ALAS2-2026-3264 (ALAS-2026-3264)

"The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3264 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper...

ROS-20260430-73-0011

Vulnerability in golang related to incorrect reference definition before accessing a file. Exploitation of the vulnerability may allow an attacker to escalate his privileges...

MINI-V2M4-4P26-PFFG

Bulletin has no description...

MINI-6XH8-HCHH-WJ29

Bulletin has no description...

MINI-2QJX-JR6F-4RR2

Bulletin has no description...

MINI-Q38R-8WG3-7449

Bulletin has no description...

MINI-5PVQ-GMQX-4CP4

Bulletin has no description...

MINI-52RH-RXCV-W42M

Bulletin has no description...

CLSA-2026-1777455447 openssl: Fix of CVE-2026-28387

CVE-2026-28387: fix use-after-free / double-free in danematch by releasing the previously stored dane-mcert with X509free instead of OPENSSLfree; the slot is reference-bumped via X509upref so the matching free is X509free...

MINI-P942-VHRX-MXRX

Bulletin has no description...

CVE-2026-42515 Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMIS

This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system...