CVE-2026-8495

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...

CVE-2026-8495 Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...

CVE-2026-8495

The Date iCal Drupal module (Date iCal) is affected by a Missing Authorization vulnerability that allows forceful browsing. Affected versions are 0.0.0 through 4.0.14, with exploitation stemming from insufficient access checks and input sanitization in the iCal feed export functionality, which ex...

CVE-2026-8495 Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...

CVE-2026-8495 Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...

CVE-2026-41470

creationtimestamp| type| source ---|---|--- 2026-05-19 21:18:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmacvwwmpk2o...

GHSA-7HGR-7H44-33W2

creationtimestamp| type| source ---|---|--- 2026-05-19 20:40:52+00:00| seen| https://gist.github.com/alon710/d948bdbe7f1b3b90439141bced4b12bc...

CVE-2026-5511

creationtimestamp| type| source ---|---|--- 2026-05-19 20:12:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mma7a7eyfy2n...

CVE-2026-42526

creationtimestamp| type| source ---|---|--- 2026-05-19 19:29:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mma4tie6mk25 2026-05-19 22:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahaomavt2t 2026-07-03 07:30:42+00:00| seen|...

UBUNTU-CVE-2026-41470

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP...

CVE-2026-8970

creationtimestamp| type| source ---|---|--- 2026-05-19 16:41:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7thpa6i32i 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520 2026-05-20 02:01:27+00:00| seen|...

GHSA-JGGG-4JG4-V7C6

creationtimestamp| type| source ---|---|--- 2026-05-19 16:40:49+00:00| seen| https://gist.github.com/alon710/4e72f2de4fd57f71c04d127b90b84200...

CVE-2026-42539

creationtimestamp| type| source ---|---|--- 2026-05-19 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7rh74g2w2u 2026-06-04 23:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnirkk6m7z2f...

CVE-2026-42647

creationtimestamp| type| source ---|---|--- 2026-05-19 13:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm7iucobhh2c 2026-06-01 22:00:28+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/455 2026-06-11 23:00:59+00:00| seen|...

CVE-2026-7307

creationtimestamp| type| source ---|---|--- 2026-05-19 13:17:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7i2vkom32i...

CVE-2026-37979

creationtimestamp| type| source ---|---|--- 2026-05-19 12:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7ggubce42e...

GHSA-8JQP-QV73-395R

creationtimestamp| type| source ---|---|--- 2026-05-19 12:39:14+00:00| seen| Telegram/SPO6iT-d8-bIQWZXI60t6OwvPUIqsHGwkcNiX5JYtOrng...

GHSA-G868-J3QM-4J28 georgringer/news has SQL Injection in extension "News system" (news)

The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires the "Date Menu of news articles" plugin ...

georgringer/news has SQL Injection in extension "News system" (news)

The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires the "Date Menu of news articles" plugin ...

CVE-2026-8726

The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires the "Date Menu of news articles" plugin ...