CVE-2026-8073

creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma6kokbey2c 2026-05-20 02:55:03+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmavpopt3b2q...

CVE-2026-8958

creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520 2026-05-20 02:01:25+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmasq5syxh2i 2026-05-20 02:01:32+00:00| seen|...

CVE-2026-47782

creationtimestamp| type| source ---|---|--- 2026-05-19 18:20:00+00:00| seen| https://jvn.jp/en/vu/JVNVU93461473 2026-05-21 02:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmdfgatcka2q 2026-06-20 13:27:31+00:00| seen|...

CVE-2026-47706

creationtimestamp| type| source ---|---|--- 2026-05-19 17:02:15+00:00| published-proof-of-concept| https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-qfwv-87qj-98xq 2026-06-04 16:10:59+00:00| seen| https://gist.github.com/alon710/e01fe3eef2f4071e63ac4580c1c830af...

grafana: Grafana: Information disclosure of data-source passwords via public dashboards

A flaw was found in Grafana. When public dashboards are used with direct data-sources, sensitive credentials, specifically passwords for all direct data-sources, are exposed. This information disclosure occurs even when these data-sources are not actively utilized in the dashboards. A remote...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to improper path validation in the repository checkout process. An attacker can modify files outside the intended target directory, including .git directories, by supplying a maliciously crafted repository payloa...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to improper path validation in the repository checkout process. An attacker can modify files outside the intended target directory, including .git directories, by supplying a maliciously crafted repository payloa...

CVE-2026-45434

creationtimestamp| type| source ---|---|--- 2026-05-19 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116600774685376629 2026-05-19 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm76pj6yzv2j 2026-05-19 17:49:26+00:00| seen|...

CVE-2026-4858

creationtimestamp| type| source ---|---|--- 2026-05-19 00:51:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-mattermost 2026-05-21 12:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmeep2dusz2k 2026-05-21 13:09:09+00:00| seen|...

GHSA-QW48-84F6-28GV Graphite Has a Pickle Deserialization Vulnerability

Impact Type of vulnerability: Insecure Deserialization via Python's pickle module. Who is impacted: Users of Graphite graph database engine versions before 0.2 who load database files from untrusted or third-party sources. An attacker could craft a malicious database file that executes arbitrary...

CERTFR-2026-ACT-022

creationtimestamp| type| source ---|---|--- 2026-05-18 11:39:08+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mm4s3dwvnz2n 2026-05-18 11:39:09+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116595382450086436...

CVE-2026-7498

creationtimestamp| type| source ---|---|--- 2026-05-18 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116595112473906096 2026-05-18 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm4oamh4jk2y 2026-05-18 10:48:08+00:00| seen|...

CVE-2026-6495

creationtimestamp| type| source ---|---|--- 2026-05-18 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116594404656368136 2026-05-18 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm4e6qc5hu2m 2026-05-18 09:14:09+00:00| seen|...

CVE-2026-8788 Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

EUVD-2026-30739

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

CVE-2026-8788 Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

CVE-2026-6473

creationtimestamp| type| source ---|---|--- 2026-05-18 06:01:20+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-postgresql-1 2026-05-18 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm5efumaz32w 2026-05-19 18:13:50+00:00| seen|...

CVE-2026-8786

creationtimestamp| type| source ---|---|--- 2026-05-18 06:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm475sogkr2f 2026-05-18 06:00:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/116594050785807637 2026-05-18 06:27:11+00:00| seen|...

CVE-2026-8776

creationtimestamp| type| source ---|---|--- 2026-05-18 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm3q346myt2v 2026-05-18 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116592989309624683 2026-05-18 03:00:46+00:00| seen|...

CVE-2026-46720

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics...