CVE-2026-60335

creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-64812

creationtimestamp| type| source ---|---|--- 2026-07-23 14:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd3xtymvy24 2026-07-29 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqvegsobk2i...

CVE-2026-65493

creationtimestamp| type| source ---|---|--- 2026-07-23 14:07:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrcz4oo5wa2j 2026-07-23 14:07:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116969676803538870...

EUVD-2026-48249

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...

CVE-2026-65540

CVE-2026-65540 affects the WordPress plugin “Popup for CF7 with Sweet Alert” (versions <= 1.6.5). The vulnerability is a reported unauthenticated Cross Site Request Forgery (CSRF) weakness in this plugin. The CVSS data indicate: AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:L, base score 7.1 (HIGH)...

EUVD-2026-48141

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

EUVD-2026-48193

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-59540

The CVE concerns WordPress plugin SMS Alert Order Notifications, affected in versions

CVE-2026-15015

creationtimestamp| type| source ---|---|--- 2026-07-23 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968824938837459 2026-07-23 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i 2026-07-23 13:58:05+00:00| seen|...

CERTFR-2026-ALE-008

creationtimestamp| type| source ---|---|--- 2026-07-22 15:03:13+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116964235036563174...

CVE-2026-16366

creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:14+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqqzlx2z2z...

UBUNTU-CVE-2026-47247

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor WordPress, Sharp/libvips,...

CVE-2026-62497

CVE-2026-62497 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.13–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Flow Manufacturing, potentially leading to unauthorized creation, deletion, or modificati...

CVE-2026-61119

...

CVE-2026-61060

...

CVE-2026-61062

CVE-2026-61062 affects Oracle PeopleSoft Enterprise FIN Cash Management (Cash Management component) for the 9.2 release. The vulnerability is exploitable locally by a user with logon to the infrastructure where PeopleSoft runs, with low privileges, and can compromise the Cash Management component...

CVE-2026-61012

...

CVE-2026-60917

...

CVE-2026-60845

...

CVE-2026-60651

CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...