27114 matches found
CVE-2026-15322
creationtimestamp| type| source ---|---|--- 2026-07-18 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtunfxgl2l 2026-07-19 05:13:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqxzh7sx6a2d 2026-07-19 05:14:11+00:00| seen|...
CVE-2026-16120
creationtimestamp| type| source ---|---|--- 2026-07-18 16:24:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwoiipiwv2i...
CVE-2025-71395
creationtimestamp| type| source ---|---|--- 2026-07-18 16:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwnr4wefx22...
CVE-2025-71391
creationtimestamp| type| source ---|---|--- 2026-07-18 15:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwmhbruca2e...
CVE-2026-16117
creationtimestamp| type| source ---|---|--- 2026-07-18 13:14:19+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mqwdtonr6k25 2026-07-18 14:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwifxu7mz2z 2026-07-18 15:00:46+00:00| seen|...
CVE-2026-16084
creationtimestamp| type| source ---|---|--- 2026-07-18 11:56:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqw7ip6m2g2i...
CVE-2026-9734
creationtimestamp| type| source ---|---|--- 2026-07-18 06:51:27+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116939652207836159 2026-07-18 07:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqvrgqocrf2q...
CVE-2026-44979
creationtimestamp| type| source ---|---|--- 2026-07-18 00:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquzfwqwag27...
CVE-2026-54243
creationtimestamp| type| source ---|---|--- 2026-07-17 23:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwyzxvhl2b...
CVE-2026-52746 JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion
JSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions. This issu...
CVE-2026-12694
creationtimestamp| type| source ---|---|--- 2026-07-17 17:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqub4b72eg2r 2026-07-17 19:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhghiz762q 2026-07-19 10:01:00+00:00| seen|...
CVE-2026-49208
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...
CVE-2026-14741
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
CVE-2026-49208 Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...
CVE-2026-49208 Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...
CVE-2026-14741 HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
EUVD-2026-45190
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
CVE-2026-14741
CVE-2026-14741 affects the Perl module HTTP::Date prior to version 6.08. The vulnerability is a CPU-exhaustion (DoS) due to polynomial regex backtracking in parse_date(); untrusted HTTP date headers passed to str2time()/parse_date() can cause unbounded CPU usage because several regex alternatives...
CVE-2026-14741
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
CVE-2026-14741 HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...