27880 matches found
CVE-2026-60074
Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...
CVE-2026-44616
creationtimestamp| type| source ---|---|--- 2026-07-30 11:35:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4y4bf4sqgchgx 2026-07-30 16:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cg5t67cdsurn4...
CVE-2026-18363
creationtimestamp| type| source ---|---|--- 2026-07-30 11:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y 2026-07-30 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24...
CVE-2026-44099
creationtimestamp| type| source ---|---|--- 2026-07-30 07:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bapsujimxsazk...
CVE-2026-11881
The Fluent Forms WordPress plugin (versions prior to 6.2.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly sanitize and escape specific form field configuration settings before outputting them within an inline script during form renderin...
CVE-2026-11881 Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field
The Fluent Forms WordPress plugin before 6.2.6 does not sanitise and escape one of its form field configuration settings before outputting it inside an inline script when a form is rendered, which could allow users with a role as low as Contributor with delegated form-management permission, and...
CVE-2026-11881 Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field
The Fluent Forms WordPress plugin before 6.2.6 does not sanitise and escape one of its form field configuration settings before outputting it inside an inline script when a form is rendered, which could allow users with a role as low as Contributor with delegated form-management permission, and...
CVE-2026-17947
creationtimestamp| type| source ---|---|--- 2026-07-30 05:21:52+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-07-30 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvbggu3e2e 2026-08-03 10:48:34+00:00| seen|...
CVE-2026-17783
creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:59:26+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...
CVE-2025-14562
creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:51+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrumu73k2a2n...
CVE-2025-71387
creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:03+00:00| seen| https://jvn.jp/en/vu/JVNVU98815601 2026-08-30 13:33:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o...
CVE-2026-67244
creationtimestamp| type| source ---|---|--- 2026-07-30 04:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/34ezh5ocufffj 2026-08-04 14:29:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7xdfg3x2c 2026-08-05 19:37:07+00:00| seen|...
CVE-2026-1982
creationtimestamp| type| source ---|---|--- 2026-07-30 04:08:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dyvqkny6lwujo...
CVE-2026-48449
creationtimestamp| type| source ---|---|--- 2026-07-30 03:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtjzfcgkl2e 2026-07-30 04:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtkiggdyr2u 2026-07-30 14:04:22+00:00| seen|...
GHSA-8HM4-R66F-29WR
creationtimestamp| type| source ---|---|--- 2026-07-30 03:31:37+00:00| seen| https://gist.github.com/alon710/555463e864b3e92acb0ee1bba5502d4f...
CVE-2026-15686
creationtimestamp| type| source ---|---|--- 2026-07-30 03:06:07+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrthha6kfr2u 2026-07-30 08:31:32+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrtzn3w2sn23 2026-08-23 04:17:20+00:00| seen|...
[SECURITY] Fedora 43 Update: perl-HTTP-Date-6.08-1.fc43
This module provides functions that deal the date formats used by the HTTP protocol and then some more. Only the first two functions, time2str and str2time, are exported by default...
PT-2026-66475
Name of the Vulnerable Software and Affected Versions Date::Manip versions prior to 7.0 Description CPU exhaustion can occur due to quadratic backtracking during unanchored time substitution within the parse time function. The issue arises when the function uses an unanchored substitution...
Linux Distros Unpatched Vulnerability : CVE-2026-60075
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in parsetime. parsetime removes a...
PT-2026-66474
Name of the Vulnerable Software and Affected Versions Date::Manip versions prior to 7.0 Description Processing of untrusted character strings in ParseDate or Date::Manip::Date-parse can result in corrupted dates without triggering a parse error. This occurs because the parsing regular expressions...