42627 matches found
GeoServer Demo Request Endpoint - Server Side Request Forgery
It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...
MINI-PPX7-9JR8-89PF
Bulletin has no description...
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-73381
creationtimestamp| type| source ---|---|--- 2026-08-18 15:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtekgvdegp2j 2026-08-18 16:10:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem5ds6v52e...
CVE-2026-59903
creationtimestamp| type| source ---|---|--- 2026-08-17 19:31:21+00:00| seen| https://gist.github.com/alon710/53c9694ceb5875fbe39960b018952b7c...
MINI-75X2-6G3G-CJ44
Bulletin has no description...
MINI-5X2J-G6RH-3CQ4
Bulletin has no description...
CVE-2026-72209
creationtimestamp| type| source ---|---|--- 2026-08-17 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbdmrn5gw2m...
MINI-MFP4-JHGV-V7GM
Bulletin has no description...
MINI-9F3M-CP73-8MW3
Bulletin has no description...
MINI-QW22-QC8R-HXR6
Bulletin has no description...
CVE-2026-16145
creationtimestamp| type| source ---|---|--- 2026-08-15 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt5f4hy6y22t...
MINI-3G7M-8MR7-8FXV
Bulletin has no description...
DEBIAN-CVE-2026-72132
In the Linux kernel, the following vulnerability has been resolved: NFS: Charge unstable writes by request size, not folio size nfsfoliomarkunstable and nfsfolioclearcommit charge and uncharge NRWRITEBACK/WBWRITEBACK by folionrpagesfolio once per request added to or removed from a commit list. Th...
MINI-Q8H6-F7H2-63PM
Bulletin has no description...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server, jitsucom-jitsu, langfuse...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)
Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...
GO-2026-4947 vulnerabilities
Vulnerabilities for packages: amazon-k8s-cni, lvm-driver, harbor-registry-fips, apko-fips, omni-fips, mcp-grafana, nats, cloud-provider-gcp-cloud-controller-manager-fips, terraform-provider-random-fips, addon-resizer, crossplane-provider-aws-servicediscovery-fips, aws-efs-csi-driver,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: lvm-driver, node-feature-discovery, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, cloud-provider-gcp-cloud-controller-manager-fips, blob-csi, prometheus-node-exporter-fips, docker-machine-driver-linode, crossplane-provider-aws-sns, kapp,...