CVE-2026-22822

creationtimestamp| type| source ---|---|--- 2026-01-22 02:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy56mejgh2t 2026-01-23 03:15:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3md2qc4ztbt26 2026-01-23 04:37:15+00:00| seen|...

CVE-2025-27378

creationtimestamp| type| source ---|---|--- 2026-01-22 01:25:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxzpe5az52v 2026-01-22 04:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcydoyxvz32n...

CVE-2026-23630

creationtimestamp| type| source ---|---|--- 2026-01-22 01:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxz3qaqqk2n 2026-08-27 20:35:03+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mu3p4o3wjm2r...

CVE-2026-23893

creationtimestamp| type| source ---|---|--- 2026-01-22 01:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxyj3ze4u2i 2026-01-22 09:21:41+00:00| seen| https://gist.github.com/Darkcrai86/10ff5ddfe001e215953d00fa8199fd07 2026-02-13 13:12:56+00:00| seen|...

Duplicate

This advisory duplicates another...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46711)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46711 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43833)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43833 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix NULL pointer...

PT-2026-3919

Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions through 1.5.6.3 Description The LA-Studio Element Kit for Elementor plugin for WordPress is susceptible to unauthorized administrative user creation. This occurs because the ajax register handle...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37849)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37849 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCP...

CVE-2025-68138

creationtimestamp| type| source ---|---|--- 2026-01-21 21:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxnljdnk42c...

CVE-2025-68134

creationtimestamp| type| source ---|---|--- 2026-01-21 21:43:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxnckwdcj2n...

CVE-2026-21937

creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

CVE-2018-1000632

creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

CVE-2026-21929

creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

CVE-2026-22792

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML including on event attributes to execute in the renderer context. An attacker can inject an payload to run arbitrary...

CVE-2026-22792

5ire desktop AI assistant (cross-platform) prior to version 0.15.3 is affected by an unsafe HTML rendering vulnerability in the renderer context that allows untrusted HTML (including on* event attributes) to execute JavaScript. An attacker can inject an payload to call exposed bridge APIs (e.g.,...

CVE-2025-68136

EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like Session, IConnection which open new TCP socket for the ISO15118-20 communications and registers callbacks for the created file descriptor, witho...

CVE-2025-68136 EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service

EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like Session, IConnection which open new TCP socket for the ISO15118-20 communications and registers callbacks for the created file descriptor, witho...

CVE-2025-68136

EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like Session, IConnection which open new TCP socket for the ISO15118-20 communications and registers callbacks for the created file descriptor, witho...

WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter vulnerability

Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakitbkrole parameter vulnerability discovered by WordFence in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.5.6.3...