27720 matches found
SUSE-SU-2026:3551-1 Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution...
CVE-2026-65545
creationtimestamp| type| source ---|---|--- 2026-08-10 11:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspxxl6kic2o 2026-08-11 03:21:54+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3msrnwhptkf2b 2026-08-11 07:16:09+00:00| seen|...
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...
SUSE-SU-2026:3537-1 Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution...
CVE-2026-61959
creationtimestamp| type| source ---|---|--- 2026-08-10 09:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msprazlbii2z 2026-08-11 05:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrucszi4l2f...
CVE-2026-60074
A flaw was found in Date::Manip. This vulnerability allows an attacker to provide specially crafted input containing non-ASCII decimal digits to the Date::Manip library for Perl. The library's parsing logic incorrectly processes these digits, truncating the input and resulting in an inaccurate da...
CVE-2026-19383
creationtimestamp| type| source ---|---|--- 2026-08-10 02:37:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2fofomjudpidj...
CVE-2026-65517
creationtimestamp| type| source ---|---|--- 2026-08-10 00:16:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msot3onbxd2w 2026-08-10 20:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqw5ba4yb2o...
CVE-2026-19368
creationtimestamp| type| source ---|---|--- 2026-08-09 22:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idhvgetbit6xd...
CVE-2022-2200
creationtimestamp| type| source ---|---|--- 2026-08-09 04:23:36+00:00| seen| https://t.me/onelab1337/2324 2026-08-10 00:00:29+00:00| published-proof-of-concept| https://t.me/onelab1337/2324...
CVE-2026-71984
creationtimestamp| type| source ---|---|--- 2026-08-09 00:12:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcbpazap2o...
CVE-2026-66062
creationtimestamp| type| source ---|---|--- 2026-08-08 08:31:57+00:00| seen| https://gist.github.com/alon710/47ff7eb96677e04e1cb388be69ae9049...
CVE-2026-15252
creationtimestamp| type| source ---|---|--- 2026-08-08 08:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskmxwsoxh22 2026-08-09 04:18:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmpzpez4w2i...
CVE-2026-19268
Summary of CVE-2026-19268 (abdullah1854 MCPGateway) : The vulnerability affects the MCPGateway project up to commit 549f494a9e363f40530149de324b8097de424230, specifically the Claude Usage Range Endpoint. The issue is in the function getUsageByDateRange within src/services/claude-usage.ts, where a...
EUVD-2026-54768
A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...
CVE-2026-16267 Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field
The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attackers to inject arbitrary PHP objects...
CVE-2026-16267
The CVE-2026-16267 issue affects the Newsletters WordPress plugin prior to version 4.16, where unserialising a value from a public form submission does not restrict allowed classes, enabling unauthenticated attackers to inject arbitrary PHP objects. This is a high-severity, remote vulnerability w...
CVE-2026-20339
creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 11:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h 2026-08-08 18:09:47+00:00| seen|...
CVE-2022-4995
Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...