CVE-2026-47418

creationtimestamp| type| source ---|---|--- 2026-07-21 19:49:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ldd6txf27...

CVE-2026-47412

creationtimestamp| type| source ---|---|--- 2026-07-21 19:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kczhtvo2o...

CVE-2026-47419

creationtimestamp| type| source ---|---|--- 2026-07-21 19:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kb7tahr2i...

CVE-2026-16361

creationtimestamp| type| source ---|---|--- 2026-07-21 19:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6k4uz5j62u 2026-07-22 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 23:36:04+00:00| see...

CVE-2026-65061 Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-64615

CVE-2026-64615 affects Data::Graph::Shared for Perl, specifically versions before 0.04. The implementation creates a world-readable mmap backing file by opening path with O_RDWR|O_CREAT and mode 0666 (leading to 0644 under default umask), without O_NOFOLLOW or O_EXCL checks. This enables local us...

CVE-2026-15793

creationtimestamp| type| source ---|---|--- 2026-07-21 19:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6im6rly627...

CVE-2026-24232

creationtimestamp| type| source ---|---|--- 2026-07-21 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gr6jdha2b...

CVE-2026-15789

creationtimestamp| type| source ---|---|--- 2026-07-21 18:22:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gi6jkll2g...

CVE-2026-28317

creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqfnokm2v 2026-07-21 17:02:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6byq6dsr2o 2026-07-26 15:37:07+00:00| seen|...

CVE-2026-28316

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amuchyj2a 2026-08-11 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mst7fejbrg2e...

CVE-2026-28312

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajbif3b23 2026-07-26 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrksvpexrs23...

CVE-2026-28309 SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments...

CVE-2024-51314

creationtimestamp| type| source ---|---|--- 2026-07-21 15:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr64m5so3o2e...

CVE-2026-64608

creationtimestamp| type| source ---|---|--- 2026-07-21 15:16:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr643e6ng22o 2026-07-21 15:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr655ygjqd22 2026-07-21 17:06:49+00:00| seen|...

CVE-2026-59846

creationtimestamp| type| source ---|---|--- 2026-07-21 14:35:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5zrvgfjv2q...

CVE-2026-16401

creationtimestamp| type| source ---|---|--- 2026-07-21 14:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ziwxbe42b 2026-07-22 04:47:36+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 18:40:05+00:00| seen|...

CVE-2026-65048 Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index

Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parseSubmissionIndex accepts arbitrary strings as submission indexes without numeric validation, and adminformelement...

CVE-2026-6792

creationtimestamp| type| source ---|---|--- 2026-07-21 14:06:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5y63a6gi2c 2026-07-21 14:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr62mqyiss2s...

SUSE CVE-2026-64105

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free privateirqs when init fails after allocation Companion to commit 250f25367b58 "KVM: arm64: Tear down vGIC on failed vCPU creation", which added the missing kvmvgicvcpudestroy call to the kvmsharehyp failure...