EUVD-2026-2016

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

CVE-2025-71139

creationtimestamp| type| source ---|---|--- 2026-01-14 16:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfgywp34l2c 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602...

CVE-2026-0739 WMF Mobile Redirector <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters

The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level...

EUVD-2026-2534

The Flat Shipping Rate by City for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'cities' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2023-54335

creationtimestamp| type| source ---|---|--- 2026-01-14 01:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdx2eyxqs2c...

CVE-2022-50934

This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue...

CVE-2022-50911

This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue...

CVE-2022-50807

This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue...

2026-01 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5073723)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-01 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5073723)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-01 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5073724)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2026-01 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5073724)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2026-01 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5073722)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-01 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5073724)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2026-20812 LDAP Tampering Vulnerability

...

DEBIAN-CVE-2025-68802

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit numsyncs to prevent oversized allocations The exec and vmbind ioctl allow userspace to specify an arbitrary numsyncs value. Without bounds checking, a very large numsyncs can force an excessively large allocation,...

CVE-2025-71099

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xeoaaddconfigioctl In xeoaaddconfigioctl, we accessed oaconfig-id after dropping metricslock. Since this lock protects the lifetime of oaconfig, an attacker could guess the id and call...

Use of a Broken or Risky Cryptographic Algorithm

Overview net.gleske:jervis is a Self service Jenkins job generation using Jenkins Job DSL plugin groovy scripts. Reads .jervis.yml and generates a job in Jenkins. Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm due to improper padding of SHA-25...

CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1

CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1. An upgraded version of the package is available that resolves this issue...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs updating a zero size range to the extent cache, which could cause the kernel to crash...