CVE-2026-14807

creationtimestamp| type| source ---|---|--- 2026-07-06 08:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpxmsdqm5f2s 2026-07-06 08:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxnj6vp2d2n 2026-07-06 09:00:30+00:00| seen|...

EUVD-2026-41830

Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...

CVE-2026-46454

The CVE-2026-46454 entry describes an improper input validation vulnerability in Apache Camel’s CometD binding. The issue arises because inbound Bayeux/CometD headers are mapped into the Camel Exchange without a HeaderFilterStrategy, copying the entire ext.CamelHeaders map onto the message. This ...

GHSA-3FMP-59V6-4QW2

creationtimestamp| type| source ---|---|--- 2026-07-06 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870089136632895 2026-07-06 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpwrvj6vez2g...

PT-2026-55885

Name of the Vulnerable Software and Affected Versions Apache Camel versions 3.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An issue exists in the Apache Camel JMS component where the JmsBinding.extractBodyFromJms function i...

CVE-2026-14751

creationtimestamp| type| source ---|---|--- 2026-07-05 14:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116867729198058639 2026-07-05 14:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpvqedifzs2h 2026-07-05 16:20:41+00:00| seen|...

CVE-2026-14738

creationtimestamp| type| source ---|---|--- 2026-07-05 11:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116867021281566995 2026-07-05 11:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpvgcg262i25 2026-07-05 12:21:46+00:00| seen|...

CVE-2026-14781

creationtimestamp| type| source ---|---|--- 2026-07-05 08:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116866313382807189 2026-07-05 08:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpv4aipdkd2o 2026-07-05 09:51:39+00:00| seen|...

CVE-2026-14721

creationtimestamp| type| source ---|---|--- 2026-07-05 04:19:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116865443796222234 2026-07-05 09:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpv7m3esm62m 2026-07-05 09:21:39+00:00| seen|...

CVE-2026-14647

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2026-14647 onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...

IKEv2 Denial of Service via malformed fragmentation

...

IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

...

IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

...

PT-2026-55726

Name of the Vulnerable Software and Affected Versions onnx versions prior to 1.22.0 Description A weakness in the onnxruntime component allows for a remote out-of-bounds read. This occurs within the convPoolShapeInference opset19 function located in the onnx/defs/nn/old.cc file. Recommendations...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to improper enforcement of the PKCE S256 challenge during the OAuth2 token exchange process. An attacker can obtain access tokens without providing the expected code verifier by bypassing the intended...

Replay Attack

Overview Affected versions of this package are vulnerable to Replay Attack due to improper enforcement of OAuth2 authorization code expiry and single-use requirements in the authorization code process. An attacker can gain unauthorized access by reusing valid authorization codes during the token...

CVE-2026-26232

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange...

CVE-2026-26247

Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...

EUVD-2026-41628

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange...