JLSEC-2026-770 OSGeo GDAL vulnerable to out-of-bounds read

A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the file frmts/hdf4/hdf-eos/GDapi.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the...

CVE-2026-62947

creationtimestamp| type| source ---|---|--- 2026-07-15 21:25:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnuuez3f2s 2026-07-19 00:01:59+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqxhztoy432e...

CVE-2016-10408

creationtimestamp| type| source ---|---|--- 2026-07-15 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqpmufg3zb2s...

CVE-2026-52887

creationtimestamp| type| source ---|---|--- 2026-07-15 21:04:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpmoxunof2w 2026-07-15 22:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqppu2ragj2n 2026-07-16 00:53:54+00:00| seen|...

CVE-2026-62355

creationtimestamp| type| source ---|---|--- 2026-07-15 21:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmjafzh62u...

CVE-2026-52870

creationtimestamp| type| source ---|---|--- 2026-07-15 21:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpmifoxio25...

CVE-2026-40952

creationtimestamp| type| source ---|---|--- 2026-07-15 21:00:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpmi4bypn2i...

CVE-2026-40953

creationtimestamp| type| source ---|---|--- 2026-07-15 21:00:10+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpmhxmhi52n...

CVE-2026-12997

creationtimestamp| type| source ---|---|--- 2026-07-15 20:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmceqwmg2m 2026-07-16 06:01:01+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqqkp3t52c2u...

CVE-2026-54443

creationtimestamp| type| source ---|---|--- 2026-07-15 20:50:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplwy7au72x...

CVE-2026-46684

creationtimestamp| type| source ---|---|--- 2026-07-15 20:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplsfbiqb2l 2026-07-16 00:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxv6enic2a 2026-07-18 04:16:04+00:00| seen|...

CVE-2026-45534

creationtimestamp| type| source ---|---|--- 2026-07-15 20:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplsdyn722c 2026-07-16 00:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyxxtwrc2e...

CVE-2026-15746

creationtimestamp| type| source ---|---|--- 2026-07-15 20:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpls3eges2s...

CVE-2026-55954

creationtimestamp| type| source ---|---|--- 2026-07-15 20:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplor74bq2v...

CVE-2026-15895

creationtimestamp| type| source ---|---|--- 2026-07-15 20:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplnl5ild2l 2026-08-08 07:36:05+00:00| seen| https://gist.github.com/alon710/990635ffdd01b8358cf96c18cad137b7...

CVE-2026-62350

creationtimestamp| type| source ---|---|--- 2026-07-15 20:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplfhvrnj2i...

CVE-2026-62348

creationtimestamp| type| source ---|---|--- 2026-07-15 20:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplbun2nl2h...

CVE-2026-62353

creationtimestamp| type| source ---|---|--- 2026-07-15 20:36:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl6iytqy2s...

CVE-2026-8055

creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...