CVE-2026-14010

creationtimestamp| type| source ---|---|--- 2026-07-01 21:14:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgpvoket2i 2026-07-01 21:14:07+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgq2adkr2g 2026-07-02 07:49:13+00:00| seen|...

CVE-2026-13947

creationtimestamp| type| source ---|---|--- 2026-07-01 21:11:12+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgksqeql2f 2026-07-01 21:11:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgkvqibp2o 2026-07-02 07:46:55+00:00| seen|...

CVE-2026-13940

creationtimestamp| type| source ---|---|--- 2026-07-01 21:07:01+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgddfuty2a 2026-07-01 21:07:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgdekmrq2q 2026-07-02 07:46:40+00:00| seen|...

CVE-2026-54720

Silverstripe Framework (PHP) contains an XSS vulnerability in the CMS “Insert media from web” feature, exploitable via a specially crafted embed. The issue affects versions prior to 6.2.2 and is mitigated by upgrading to 6.2.2 or later. The vulnerability stems from the media embed handling and co...

CVE-2026-54720 Silverstripe Framework: Possible XSS attack through media embed

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

EUVD-2026-40297

Rancher has over-inclusive team membership expansion in GitHub App authentication provider...

CVE-2026-13871

creationtimestamp| type| source ---|---|--- 2026-07-01 20:43:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmezataqo2t 2026-07-01 20:43:33+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmezf42co2u 2026-07-02 07:21:43+00:00| seen|...

unified-bb-suite

Unified BB Suite — Combined Workflow Two work...

CVE-2026-13881

creationtimestamp| type| source ---|---|--- 2026-07-01 20:39:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmescdq4c2u 2026-07-01 20:39:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmesg4dmi2a 2026-07-02 07:22:13+00:00| seen|...

CVE-2026-13809

creationtimestamp| type| source ---|---|--- 2026-07-01 19:47:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbuskdo62q 2026-07-01 19:47:22+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmbuvu6h62v 2026-07-02 07:19:23+00:00| seen|...

CVE-2026-53467

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versio...

CVE-2026-55510

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51...

CVE-2026-55597

CVE-2026-55597 affects ImageMagick prior to 7.1.2-26, where incorrect handling of arguments can cause a heap buffer overwrite in the JP2 encoder. The issue is fixed in 7.1.2-26. This can lead to memory corruption in the JP2 encoding path; upgrading to the fixed release is the advised remediation.

CVE-2026-55577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in...

CVE-2026-55628

ImageMagick (CVE-2026-55628) is affected by a policy bypass in the -concatenate operation present in versions prior to 7.1.2-26he, due to missing security policy checks. This could allow reading and writing to paths disallowed by policy. The issue has been fixed in version 7.1.2-26he. Remediation...

CVE-2026-54428

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows an remote attacker to cause a denial of service through memory exhaustion by sending oversized compressed header blocks before the HTTP/2...

MINI-VV52-MXHR-VV78

Bulletin has no description...

Security Bulletin: IBM DataPower Gateway affected by denial of service (CVE-2026-12733)

Summary IBM DataPower Gateway affected by denial of service CVE-2026-12733 Vulnerability Details CVEID:CVE-2026-12733 DESCRIPTION: IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations. CWE:CWE-770: Allocation of Resources Without...

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by timomangcut in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.17.21...

CVE-2026-20244

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in DMG...