CVE-2026-79724

creationtimestamp| type| source ---|---|--- 2026-09-10 23:00:12+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv75qyetcx2t 2026-09-11 00:08:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv7bkilkun2j 2026-09-17 04:07:07+00:00| seen|...

DEBIAN-CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

DEBIAN-CVE-2026-49837

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...

CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49837

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...

UBUNTU-CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-4130

creationtimestamp| type| source ---|---|--- 2026-09-10 20:54:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wr6md342c...

CVE-2026-68487

creationtimestamp| type| source ---|---|--- 2026-09-10 17:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6mgms5dz2y 2026-09-10 18:09:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6niqwuew22 2026-10-14 12:57:18+00:00| seen|...

CVE-2026-79987

creationtimestamp| type| source ---|---|--- 2026-09-10 17:30:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7336jpbf7nxhm 2026-09-10 20:57:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wvho74f2b 2026-09-11 05:40:07+00:00| seen|...

CVE-2026-88899

creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6k6ywae72y 2026-09-10 18:08:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6nhwumim2j 2026-09-18 04:00:15+00:00| seen|...

CVE-2026-88868 AVideo LiveLinks Stored XSS via title and description fields

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization. A user with canStream permission can inject malicious scripts that execute in the browser...

CVE-2026-88868 AVideo LiveLinks Stored XSS via title and description fields

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization. A user with canStream permission can inject malicious scripts that execute in the browser...

EUVD-2026-75418

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization. A user with canStream permission can inject malicious scripts that execute in the browser...

CVE-2026-88868

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is affected by a stored cross-site scripting vulnerability in the LiveLinks plugin . The root cause is that the title and description fields are stored without sanitization. An attacker holding canStream permission can inject maliciou...

PYSEC-2026-3825 django CMS: Stored XSS in edit-mode plugin exception rendering

Summary When plugin rendering fails in edit mode, django CMS renders a cms-rendering-exception block so editors can see that a placeholder could not be rendered. Older code built that block's heading by interpolating the exception message, placeholder/source strings, and the failing plugin's shor...

DEBIAN-CVE-2026-59679

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

DEBIAN-CVE-2026-44950

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice position, length lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the...

CVE-2026-82769

creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:25+00:00| seen| https://jvn.jp/en/vu/JVNVU99009004...

CVE-2026-80914

creationtimestamp| type| source ---|---|--- 2026-09-10 04:52:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117244950981324206 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-87500

creationtimestamp| type| source ---|---|--- 2026-09-10 02:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4zle25ko2f 2026-09-10 04:48:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 14:37:07+00:00| seen|...