CVE-2026-6798

The CVE-2026-6798 entry concerns the WordPress plugin “2Download Connector for 2DL Hosted Checkout.” According to connected sources, all versions up to and including 0.1.5 are vulnerable to unauthorized access due to insufficient authorization checks, enabling unauthenticated attackers to view se...

CVE-2026-56131

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

CVE-2026-47633

creationtimestamp| type| source ---|---|--- 2026-06-19 06:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775245576207551 2026-06-19 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momo3nowoe2c...

GHSA-8MG9-J9CF-54CJ

creationtimestamp| type| source ---|---|--- 2026-06-19 04:41:13+00:00| seen| https://gist.github.com/alon710/e083ed26c473e5302badc99cce623436 2026-06-19 05:02:08+00:00| seen| https://gist.github.com/alon710/21958fb84fc5c64da7368e4899e2b6cf...

CVE-2026-53852

creationtimestamp| type| source ---|---|--- 2026-06-19 04:41:13+00:00| seen| https://gist.github.com/alon710/e083ed26c473e5302badc99cce623436 2026-06-19 05:02:08+00:00| seen| https://gist.github.com/alon710/21958fb84fc5c64da7368e4899e2b6cf...

CVE-2026-32174

creationtimestamp| type| source ---|---|--- 2026-06-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momj2bqrjp26 2026-06-19 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774890711719017...

CVE-2026-12044

creationtimestamp| type| source ---|---|--- 2026-06-19 03:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momgy6vhd72r 2026-06-19 05:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkr5ol5y2u 2026-08-02 08:00:28+00:00| seen|...

CVE-2026-12048

creationtimestamp| type| source ---|---|--- 2026-06-19 03:43:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momggbyg3x2y 2026-06-19 05:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkqp24jg2f 2026-06-22 11:31:44+00:00| seen|...

CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

CVE-2026-56131

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

SUSE CVE-2026-8356

LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose...

SUSE CVE-2026-42055

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and the...

PT-2026-50992

Name of the Vulnerable Software and Affected Versions Joomla! Component vAccount version 2.0.2 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending GET requests to the 'vaccount-dashboard/expense'...

PT-2026-50892

Name of the Vulnerable Software and Affected Versions NI grpc-device versions prior to 2.17.0 Description A memory leak exists in the BeginSidebandStream function, which can lead to a denial of service condition caused by memory exhaustion. Recommendations Update to a version later than 2.17.0. A...

PT-2026-51039

Name of the Vulnerable Software and Affected Versions Cap-go versions prior to 12.128.2 Description An authentication logic flaw allows an attacker to register and control an account linked to a victim's email address before the email is verified. By enabling two-factor authentication on this...

PT-2026-51036

Name of the Vulnerable Software and Affected Versions Cap-go versions prior to 12.128.2 Description An authentication bypass exists in the OTP One-Time Password verification process. Attackers can intercept OTP verification requests and manipulate HTTP responses to falsely indicate that...

PT-2026-53782

Impact A stored cross-site scripting XSS vulnerability affected the Markdown/RichText field preview renderer in Sveltia CMS. The DOMPurify sanitization configuration used for Markdown previews explicitly permitted iframe elements without enforcing a sandbox attribute or restricting iframe sources...

CVE-2026-56081: Weak Password Recovery Mechanism for Forgotten Password

Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account...