CVE-2026-14798

creationtimestamp| type| source ---|---|--- 2026-07-06 08:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxoyfymn62b 2026-07-08 16:12:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq5j4raelr2d...

OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

PYSEC-2026-816 OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

PYSEC-2026-811 OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

web2py exposure of sensitive information

web2py before 2.14.2 allows remote attackers to obtain the sessioncookiekey value via a direct request to examples/simpleexamples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957...

CVE-2026-14802

creationtimestamp| type| source ---|---|--- 2026-07-06 08:02:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxmshtck52q 2026-07-09 00:29:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ewkdnt42a 2026-08-12 08:00:05+00:00| seen|...

CVE-2025-51629

creationtimestamp| type| source ---|---|--- 2026-07-06 06:50:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxisikupi2p...

CVE-2026-14803

creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...

RockyLinux 10 : mod_md (RLSA-2026:30845)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:30845 advisory. httpd: modmd: unrestricted OCSP response leads to resource exhaustion CVE-2026-29168 Tenable has extracted the preceding description block directly from the...

CVE-2026-48203

creationtimestamp| type| source ---|---|--- 2026-07-05 20:31:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwg6pj4kz2a 2026-07-06 20:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywpgyich2h 2026-07-09 03:36:23+00:00| seen|...

CVE-2026-14761

creationtimestamp| type| source ---|---|--- 2026-07-05 20:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpweu4lmsj24 2026-07-06 06:51:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxitreb4b2b...

CVE-2026-38930

creationtimestamp| type| source ---|---|--- 2026-07-05 18:15:56+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpw6n4duc22c...

GHSA-JP82-JPQV-5VV3

creationtimestamp| type| source ---|---|--- 2026-07-05 14:13:06+00:00| seen| https://gist.github.com/ftnext/49c236d15e6d1d49960f59d346e70a25...

GHSA-XR5H-PHRJ-8VXV

creationtimestamp| type| source ---|---|--- 2026-07-05 13:35:41+00:00| seen| https://gist.github.com/konard/88609dd395d6031e4d410d3826dc1450...

mod_md security update

An update is available for modmd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module manages common properties of domains for one or more virtual hosts...

RLSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

CVE-2026-14735

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-14735 code-projects Smart Parking System parkings.php sql injection

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-14735

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...