CVE-2026-45357

CVE-2026-45357 — LiquidJS date filter (strftime) DoS via unbounded width padding . In LiquidJS

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-30802

creationtimestamp| type| source ---|---|--- 2026-06-17 21:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojam2yhus2f...

CVE-2026-6734

creationtimestamp| type| source ---|---|--- 2026-06-17 16:40:20+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiqvjtjr22g 2026-06-18 15:59:03+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n3uli2x 2026-06-19 05:12:21+00:00| seen|...

CVE-2026-9675

creationtimestamp| type| source ---|---|--- 2026-06-17 16:24:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moipzi2kmc2g 2026-06-17 19:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiyr2plnu2x 2026-06-18 15:59:02+00:00| seen|...

CVE-2024-37210

creationtimestamp| type| source ---|---|--- 2026-06-17 15:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moilylgbo72e...

EUVD-2026-37716

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2026-48117 DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2026-49076

creationtimestamp| type| source ---|---|--- 2026-06-17 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihqde3tk2z...

CVE-2026-49084

creationtimestamp| type| source ---|---|--- 2026-06-17 13:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihcdx4732g...

CVE-2026-8383

The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...

CVE-2026-46871

creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:34+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiayeen2k2g...

CVE-2026-46977

creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiaxrr3n52v...

CVE-2026-10094

creationtimestamp| type| source ---|---|--- 2026-06-17 09:50:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzymnnry2n...

CVE-2026-0071

creationtimestamp| type| source ---|---|--- 2026-06-17 09:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzpnnet62z 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...

CVE-2026-0064

creationtimestamp| type| source ---|---|--- 2026-06-17 09:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzgogkdh2j 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...

CVE-2026-0082

creationtimestamp| type| source ---|---|--- 2026-06-17 09:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohydjy5ah2v 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622...

CVE-2026-8383

The CVE-2026-8383 entry affects the LearnPress WordPress plugin (prior to version 4.3.7). The issue is a missing access control check on a REST endpoint: the edit context is not gated behind the edit_users capability, allowing unauthenticated visitors to retrieve per-user data including roles, fu...

CVE-2026-8383 LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...

CVE-2026-46929

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-02 09:37:24+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpnqalyw422k...