23682 matches found
CVE-2026-53692
creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:33+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53690...
kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update RCU in the mlx4srqevent function. An attacker could potentially trigger an event before the srq object is fully initialized, leading to a system crash. This could resul...
CVE-2026-53861
creationtimestamp| type| source ---|---|--- 2026-07-01 00:01:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mpk7lklwuq2o 2026-07-10 23:07:01+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mqdba7kbfs2a...
CVE-2025-36372
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows includes Db2 Connect Server could disclose sensitive information to an authenticated user from the monitoring and event tables...
CVE-2025-36372
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows includes Db2 Connect Server could disclose sensitive information to an authenticated user from the monitoring and event tables...
CVE-2025-36372 IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows includes Db2 Connect Server could disclose sensitive information to an authenticated user from the monitoring and event tables...
CVE-2025-36372
CVE-2025-36372 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) versions 11.5.0–11.5.9 and 12.1.0–12.1.4. The issue allows an authenticated user to disclose sensitive information from the monitoring and event tables due to a vulnerability in access to those tables. Publi...
EUVD-2025-210373
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows includes Db2 Connect Server could disclose sensitive information to an authenticated user from the monitoring and event tables...
CVE-2026-58173
creationtimestamp| type| source ---|---|--- 2026-06-30 18:45:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjny6diht2p...
CVE-2026-58375
creationtimestamp| type| source ---|---|--- 2026-06-30 18:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjnp7uyku23...
EUVD-2026-31975
obanweb missing authorization check on save-job event handler...
Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillance
Summary A low-privilege developer who could create a KubernetesWatchTrigger KWT in their own namespace was able to establish a persistent surveillance channel over any other namespace. Details Two independent flaws compounded: 1. pkg/kubewatcher/kubewatcher.go::createKubernetesWatch used...
WordPress Event Organiser plugin <= 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Event Organiser versions = 3.12.9...
CVE-2026-44946
creationtimestamp| type| source ---|---|--- 2026-06-30 13:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5usfmcc2z 2026-06-30 23:31:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116841661870307967 2026-07-03 06:07:07+00:00| seen|...
CVE-2026-47105
creationtimestamp| type| source ---|---|--- 2026-06-30 13:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z...
Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities
Summary IBM Event Streams is affected by multiple vulnerabilities which are addressed in IBM Event Streams version 13.0.0 Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the .unset and .omit functions. An...
Inefficient Algorithmic Complexity
Overview org.webjars.npm:brace-expansion is a WebJar for brace-expansion. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the expand function. An attacker can cause excessive CPU consumption and block the event loop by supplying a specially crafted strin...
Inefficient Algorithmic Complexity
Overview brace-expansion is a Brace expansion as known from sh/bash Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the expand function. An attacker can cause excessive CPU consumption and block the event loop by supplying a specially crafted string...
CVE-2026-9711
The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress full is vulnerable to SQL Injection via the WordPress 'search' parameter in versions up to, and including, 5.0.11 due to insufficient escaping on the user supplied parameter and lack of preparation on the existing SQL quer...