23664 matches found
CVE-2026-46982
creationtimestamp| type| source ---|---|--- 2026-07-21 22:04:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sttqniu23 2026-07-23 16:45:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-63923
A flaw was found in the Linux kernel's octeontx2-af driver. A malicious Virtual Function VF attached to a Physical Function PF in switchdev representor mode can send a specially crafted REPEVENTNOTIFY message. This message contains an unvalidated pcifunc field, which can lead to an out-of-bounds...
CVE-2026-63080
Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by injecting unsanitized filter parameters into Liquid SQL templates. Attackers can supply malicious values through...
CVE-2026-63080 Aptabase SQL Injection via ClickHouse query backend
Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by injecting unsanitized filter parameters into Liquid SQL templates. Attackers can supply malicious values through...
CVE-2026-56145
CVE-2026-56145 describes an Elasticsearch vulnerability of uncontrolled resource consumption (CWE-400) leading to denial of service via excessive memory allocation (CAPEC-130). A low-privileged authenticated user who can execute EQL sequence queries against an index they control can craft queries...
CVE-2026-53027
creationtimestamp| type| source ---|---|--- 2026-07-21 19:40:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksc4abk2n 2026-07-21 19:40:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksct2qk2n 2026-07-24 13:25:25+00:00| seen|...
CVE-2026-16361
creationtimestamp| type| source ---|---|--- 2026-07-21 19:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6k4uz5j62u 2026-07-22 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 23:36:04+00:00| see...
CVE-2026-28309
creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afo2iiy2z...
CVE-2026-16407
creationtimestamp| type| source ---|---|--- 2026-07-21 13:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xrbvh322s 2026-07-22 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 19:30:05+00:00| seen|...
CVE-2026-16404
creationtimestamp| type| source ---|---|--- 2026-07-21 13:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xhr2hqm27 2026-07-22 04:47:43+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 07:47:10+00:00| seen|...
GHSA-Q5FW-VPQC-FGPH
creationtimestamp| type| source ---|---|--- 2026-07-21 13:18:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vhspcma2g...
SUSE CVE-2026-64029
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with eventinput sequmpprocessevent borrows client-outrfile.output without synchronizing with the first-open and last-close transition in sequmpclientopen and sequmpclientclose. The last...
SUSE CVE-2026-64106
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that...
SUSE CVE-2026-64164
In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic context in btrfssyncfile The trace event btrfssyncfile is called in an atomic context all trace events are and its call to dput, which is needed due to the call to dgetparent, can...
CVE-2026-15370
creationtimestamp| type| source ---|---|--- 2026-07-21 10:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lqxtnyr2i...
GHSA-9HW9-CH79-4VH6
creationtimestamp| type| source ---|---|--- 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...
CVE-2026-6952
creationtimestamp| type| source ---|---|--- 2026-07-21 06:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr567bvu472a...
EUVD-2026-46155
The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...