EUVD-2026-49406

A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...

CVE-2026-12383

A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...

CVE-2026-12383

A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...

CVE-2026-66398

creationtimestamp| type| source ---|---|--- 2026-07-27 18:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyzne4w22 2026-07-30 04:56:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e...

CVE-2026-12394

creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7mmhgz24...

CVE-2026-65567

Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...

CVE-2026-65567

The vulnerability concerns the WordPress Event Tickets plugin for WordPress, affected in versions ≤ 5.29.0.1. It is described as an Unauthenticated Broken Access Control flaw, meaning unauthenticated users can access restricted functionality or data. The CVE-2026-65567 entry confirms the issue wi...

EUVD-2026-49238

Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...

CVE-2026-65567 WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...

CVE-2026-65567

Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...

CVE-2026-64439

creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayvxzvf2s...

CVE-2026-14827 Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter

The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calend...

EUVD-2026-49071

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

Siemens SIMATIC S7-1500 CPU 1518 MFP Trust of System Event Data (CVE-2025-68788)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505769; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2015-8138

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/558 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/558...

CVE-2016-8706

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/639 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/639...

CVE-2024-37895

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:07+00:00| seen| https://t.me/EchelonEyes/2937 2026-07-27 00:00:45+00:00| seen| https://t.me/EchelonEyes/2937 2026-07-28 00:00:43+00:00| seen| https://t.me/EchelonEyes/2937...

CVE-2019-6015

creationtimestamp| type| source ---|---|--- 2026-07-25 16:58:07+00:00| seen| https://gist.github.com/kuroma6666/70d2b192280084f50f932d4f0c0dbfc9...

SUSE CVE-2026-64496

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...

CVE-2026-66013

creationtimestamp| type| source ---|---|--- 2026-07-25 11:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrhr2nn7kh2a 2026-07-25 17:51:13+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrigld2ef32d 2026-07-31 01:39:29+00:00| seen|...