CVE-2026-64531

creationtimestamp| type| source ---|---|--- 2026-07-27 08:12:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116990931091139348 2026-07-28 10:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrp7jnvcfc2l 2026-07-28 11:12:13+00:00| seen|...

CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y...

CVE-2026-12493

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce order being completed, nor that the paid amount matches the order total, allowing unauthenticated users to mark arbitrar...

CVE-2026-13390

CVE-2026-13390 affects the WordPress plugin The Events Calendar (pre-6.16.5.1). The issue is an missing authorization check on an Event Aggregator import REST API route and an integrity check bypass for a specific status, enabling unauthenticated attackers to mark import records as failed and to ...

CVE-2026-13390 The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

Rudder Server < 1.3.0-rc.1 - SQL Injection

Rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...

ROS-20260727-73-0027

A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

CVE-2026-64225

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgxspeedmbps index cgxspeedmbps has 13 elements but RESPLINKSTATSPEED can yield values 0-15. If it returns a value = 13, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325 2026-07-27 11:00:52+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116991593814246930...

CVE-2017-2711

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:11+00:00| seen| https://t.me/KaitNews/2762 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2762 2026-08-05 19:00:05+00:00| seen| https://t.me/KaitNews/2762...

CVE-2016-8687

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:10+00:00| seen| https://t.me/KaitNews/2791 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2791 2026-08-05 19:00:05+00:00| seen| https://t.me/KaitNews/2791...

CVE-2017-3073

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:04+00:00| seen| https://t.me/KaitNews/4296 2026-07-27 00:01:45+00:00| seen| https://t.me/KaitNews/4296 2026-08-04 11:00:04+00:00| seen| https://t.me/KaitNews/4296 2026-08-05 00:00:45+00:00| seen| https://t.me/KaitNews/4296...

GHSA-44JH-J22R-33WQ

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:30+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-27 00:01:06+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-28 01:00:05+00:00| published-proof-of-concept| https://t.me/EchelonEyes/1200 2026-07-29 00:00:52+00:00|...

CVE-2023-41101

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-27 00:00:54+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-28 00:00:32+00:00| exploited| https://t.me/EchelonEyes/2245...

Linux Distros Unpatched Vulnerability : CVE-2026-15578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-15705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

SUSE CVE-2026-64273

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforceprocesspacket handles a status report packet id 0x02 by taking a force-feedback effect index straight from the device wire and using it to address the...

CVE-2026-64440

creationtimestamp| type| source ---|---|--- 2026-07-25 16:29:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116981561587489337...

SUSE CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...