CVE-2026-14322

The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allowing unauthenticated users to create fully-approved bookings for priced appointments without making any payment...

BELL-CVE-2026-63820 CVE-2026-63820 does not affect BellSoft software

Bulletin has no description...

CVE-2026-63262

creationtimestamp| type| source ---|---|--- 2026-07-22 03:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7dms6imx23...

CVE-2026-8987

creationtimestamp| type| source ---|---|--- 2026-07-22 01:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr77upipxb2j 2026-07-22 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratyrlhlu2k 2026-09-29 12:47:18+00:00| seen|...

PT-2026-63474

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A MongoDB server may terminate abnormally during the TLS handshake when initiating an outbound TLS connection if it processes a malformed OCSP response from a remote peer. OCSP stapling, a...

PT-2026-63544

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description An issue exists in the OcspServerCertificateValidator where out-of-date OCSP Online Certificate Status Protocol responses are flagged but not stopped from...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...

CVE-2026-60264

creationtimestamp| type| source ---|---|--- 2026-07-21 23:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr5pmuq2k 2026-07-23 16:50:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 10:37:07+00:00| seen|...

DEBIAN-CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-10675

creationtimestamp| type| source ---|---|--- 2026-07-21 22:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6vgein622b...

CVE-2026-10677

creationtimestamp| type| source ---|---|--- 2026-07-21 22:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uh7ybxp2o...

CVE-2026-56820

Netty’s OcspClient vulnerability (CVE-2026-56820) allows a replay attack by not validating the CertificateID in OCSP responses. A forged or unrelated-but-signed OCSP response can be accepted for another certificate issued by the same CA, bypassing revocation checks. Affected versions: 4.2.0.Final...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-67322 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-67322 Source advisory: OSV:GHSA-RWJ8-PGH3-R573...

CVE-2026-21953

creationtimestamp| type| source ---|---|--- 2026-07-21 21:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6sjn4xpd2a...

CVE-2026-60188

The CVE-2026-60188 entry affects Oracle MySQL components: MySQL Server (Replication) and MySQL Cluster. Affected versions are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability can be exploited by a high-privilege attacker with ...

CVE-2026-63903

A flaw was found in the Linux kernel's belkinsa USB serial driver. The driver's interrupt handling routine fails to validate the length of incoming status reports. This oversight allows a local attacker, by connecting a specially crafted USB device, to trigger an out-of-bounds read. The primary...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through changing a pull request's target branch without re-evaluating the official approval status on existing reviews. An attacker can bypass branch protection requirements and merge code into protected branches...

dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-67323 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-67323 Source advisory: OSV:GHSA-956X-8GVW-WG5V...

dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-67325 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-67325 Source advisory: OSV:GHSA-2F96-G7MH-G2HX...