CVE-2025-39681

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10 2026-07-28 16:19:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-39752

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-39737

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2026-3892

creationtimestamp| type| source ---|---|--- 2026-05-14 09:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlshrszelm2i 2026-05-14 09:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlsi4pzt7o2i...

CVE-2026-6506

creationtimestamp| type| source ---|---|--- 2026-05-14 08:30:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlsfmrqirb2t 2026-05-14 09:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlshytfeay2n...

CVE-2025-14870

creationtimestamp| type| source ---|---|--- 2026-05-14 07:52:53+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-14 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260515...

CVE-2026-46445

creationtimestamp| type| source ---|---|--- 2026-05-14 06:18:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mls6czolng2a...

PT-2026-41206

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.2 Description A mass assignment issue exists in the assistant update endpoint. This occurs when the server does not restrict which properties can be modified by the client, allowing user-controlled request bodies ...

PT-2026-40975

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.2 Description A mass assignment issue exists in the variable update endpoint '/api/v1/variables/variableId'. This allows authenticated users to modify server-controlled properties by including them in the JSON...

PT-2026-40976

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.2 Description A mass assignment issue exists in the tool update endpoint. This occurs when the server does not restrict which properties a client can modify, allowing user-controlled request bodies to include fiel...

CVE-2026-6667

creationtimestamp| type| source ---|---|--- 2026-05-13 21:59:40+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mlrcgdu3ss2c...

CVE-2026-34647

creationtimestamp| type| source ---|---|--- 2026-05-13 20:22:12+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlr4y2lind2e...

CVE-2026-0243

creationtimestamp| type| source ---|---|--- 2026-05-13 19:03:20+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mlqyl2vfox2c 2026-05-14 06:51:24+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-palo-alto-networks-1...

DRUPAL-CONTRIB-2026-037

This module enables you to export entity date fields as iCal feeds. The module doesn't sufficiently check entity or field access or sanitize user inputs when generating iCal feeds. This vulnerability is not mitigated by any permission, the routes are accessible to all anonymous users with no...

GHSA-V25J-WQCW-FVHJ wger has an Uncontrolled Resource Consumption issue

Summary Any authenticated user can create a routine spanning an arbitrarily long date range e.g. 100 years and then trigger the datesequence computation via any of the routine detail endpoints. The server iterates once per day in an unbounded while loop with no maximum duration validation, causin...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the datesequence computation. An attacker can exhaust server resources and deny service to other users by creating routines with extremely large date ranges and triggering endpoin...

wger has an Uncontrolled Resource Consumption issue

Summary Any authenticated user can create a routine spanning an arbitrarily long date range e.g. 100 years and then trigger the datesequence computation via any of the routine detail endpoints. The server iterates once per day in an unbounded while loop with no maximum duration validation, causin...

CVE-2026-44459 Hono: Improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not...

CVE-2026-4920

The Next Date plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2026-39803

creationtimestamp| type| source ---|---|--- 2026-05-13 13:31:14+00:00| published-proof-of-concept| https://github.com/mtrudel/bandit/security/advisories/GHSA-9q9q-324x-93r2 2026-05-13 15:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqo6ksu2u2p 2026-07-08 14:15:14+00:00|...