CVE-2026-8992

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code...

CVE-2025-32747

Dell PowerFlex Manager, versions =4.6.2, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-31441

Concrete CMS 9.5.0 and below is vulnerable to CSRF via Backend\File::approveVersion. Victim with editfilecontents permission is CSRF'd into publishing an attacker-chosen previously-uploaded version downgrade to an older version of a file, or activation of a co-editor's unpublished version. The...

CVE-2025-32751

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

CVE-2025-46371

Dell PowerFlex Manager, versions =4.6.2, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-8692

creationtimestamp| type| source ---|---|--- 2026-05-22 13:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmh2b3agfa2s 2026-05-22 13:33:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmh2ds2o5z2n 2026-05-26 05:13:36+00:00| seen|...

CVE-2025-32747

Dell PowerFlex Manager, versions =4.6.2, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-32747

Dell PowerFlex Manager

EUVD-2025-209919

Dell PowerFlex Manager, versions =4.6.2, contains an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-44618

The Apache CXF framework is vulnerable to XML External Entity (XXE) attacks due to an insecure XML parser configuration in the WS-Transfer module. This flaw allows attackers to process XML input containing external entity references, potentially leading to unauthorized access to internal files or...

OESA-2026-2429 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. From version 10.3.0 ...

CVE-2024-53667

creationtimestamp| type| source ---|---|--- 2026-05-22 11:00:14+00:00| seen| Telegram/Ijp4jLwZAukIpjn8nmvArm7-nJ19glZ2axxpP-42cGx43y8 2026-05-22 15:00:07+00:00| seen| Telegram/QQT-Q6OUMbbPAXT-HqeuIDXp1trXX8UiN3jKLc4d4AIZQ...

CVE-2026-9011

creationtimestamp| type| source ---|---|--- 2026-05-22 10:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgog6mdc42s 2026-05-22 11:32:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgtkik63l2h 2026-05-22 13:13:36+00:00| seen|...

CVE-2026-9256

creationtimestamp| type| source ---|---|--- 2026-05-22 09:02:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-501 2026-05-22 15:43:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116618991514251454 2026-05-22 16:11:43+00:00| seen|...

CVE-2026-8381

CVE-2026-8381 : In the TeamViewer DEX Platform (On-Premises) before version 9.2, certain backend API endpoints fail to enforce authorization checks, allowing an authenticated user with low privileges to access actions and resources intended for higher-privileged roles. This is a broken access con...

EUVD-2026-31420

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

CVE-2026-8381 Broken Access Control in TeamViewer DEX Platform (On Premises)

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

CVE-2026-7636 Slider by Soliloquy <= 2.8.1 - Authenticated (Subscriber+) Information Disclosure via REST API Endpoint

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the mapmetacap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extra...

EUVD-2026-31416

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the mapmetacap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extra...

CVE-2026-7249

creationtimestamp| type| source ---|---|--- 2026-05-22 07:08:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgesjbz7q2t 2026-05-22 10:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgq76woqx2l 2026-09-29 12:47:16+00:00| seen|...