CVE-2025-12736

in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource...

CVE-2026-32869

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

CVE-2026-32867

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

CVE-2026-33936

creationtimestamp| type| source ---|---|--- 2026-03-26 09:59:25+00:00| published-proof-of-concept| https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-9f5j-8jwj-x28g 2026-03-28 02:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3m65n3lp2n 2026-04-02...

Drupal OpenID Connect / OAuth client 安全漏洞

The Drupal OpenID Connect/OAuth client is an openID connection and OAuth client provided by the Drupal company. Versions of the Drupal OpenID Connect/OAuth client prior to version 1.5.0 contained security vulnerabilities. These vulnerabilities were due to improper handling of case sensitivity,...

CVE-2026-33722

creationtimestamp| type| source ---|---|--- 2026-03-25 22:09:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhw45lirag22 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar-7.5.2.tgz which is vulnerable to CVE-2026-23950

Summary IBM Maximo Application Suite - Visual Inspection component uses tar-7.5.2.tgz which is vulnerable to CVE-2026-23950. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-23950 DESCRIPTION: node-tar,a Tar for Node.js, has ...

OpenClaw Backlink Vulnerability (CNVD-2026-14858)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a backlink vulnerability that can be exploited by an attacker to read arbitrary files outside the boundaries of the configuration workspace...

PT-2026-27370

Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET parameter. Attackers can send crafted requests to news details.php, jobs details.php, or job cmp details.php with malicious...

CVE-2026-32066

This CVE ID has been rejected...

CVE-2026-32047

This CVE ID has been rejected...

Missing Default Case in Switch Statement

Overview Affected versions of this package are vulnerable to Missing Default Case in Switch Statement in the DataChangeNotification process due to a nil pointer dereference. An attacker can cause a panic and disrupt service availability by triggering this process with crafted input. Remediation...

Missing Default Case in Switch Statement

Overview Affected versions of this package are vulnerable to Missing Default Case in Switch Statement in the DataChangeNotification process due to a nil pointer dereference. An attacker can cause a panic and disrupt service availability by triggering this process with crafted input. Remediation...

CVE-2026-4530

creationtimestamp| type| source ---|---|--- 2026-03-21 23:59:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmafmfmzm24...

CVE-2026-33164

creationtimestamp| type| source ---|---|--- 2026-03-20 22:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjlin3l7f2z 2026-03-23 21:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqxdxdy5g2s...

OESA-2026-1683 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib. An integer...

CVE-2026-33124

creationtimestamp| type| source ---|---|--- 2026-03-20 13:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimwht7w52u...

CVE-2026-31998

creationtimestamp| type| source ---|---|--- 2026-03-20 05:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhsj4wzoq2a...

Fixed in Apache Tomcat 11.0.20

Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 021d1f83. This issue was reported to the Tomcat security team o...

CVE-2026-32014

creationtimestamp| type| source ---|---|--- 2026-03-19 23:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhh47eqo2q2s 2026-03-24 00:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhrdmesoz42q...