EUVD-2026-48219

Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions...

CVE-2026-64611

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

ECHO-9D31-8859-4C82

Bulletin has no description...

ECHO-18B0-99B8-3F51

Bulletin has no description...

GHSA-V2HH-GCRM-F6HX vulnerabilities

Vulnerabilities for packages: renovate, argo-workflows, yaml-language-server, tileserver-gl, vitess, opensearch-dashboards, langfuse, prism...

CVE-2026-9713

The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-suppli...

CVE-2026-9713

CVE-2026-9713 : The Lumise Product Designer for WooCommerce WordPress plugin (up to version 2.1.1) is vulnerable to SQL injection via the uploaded cart JSON file processed by the checkout AJAX action. The root cause is insufficient escaping of user-provided parameters in the find_resource() funct...

ECHO-6F24-CDD7-9E3E

Bulletin has no description...

CVE-2026-29988

creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:42+00:00| seen| https://www.jerrygamblin.com/2026/07/22/hydrate-hack-repeat-security-summer-camp-2026/ 2026-08-26 04:32:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hiwavxcpifrbx...

CVE-2026-59943

creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:05+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-j8qw-6jw8-r297...

PT-2026-64786

CVE ID :CVE-2026-48533 Published : July 23, 2026, 3:27 p.m. | 49 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-60369

...

CVE-2026-60368

...

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Summary Netty's OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID. A bad actor can replay a GOOD status response issued for an unrelated certificate by the same CA to bypass revocation checks for any certificate. Details...

EUVD-2026-47582

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks...

CVE-2026-64829

creationtimestamp| type| source ---|---|--- 2026-07-22 21:00:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb7rkbnw323...

EUVD-2026-47803

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-13089 OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-61238

creationtimestamp| type| source ---|---|--- 2026-07-22 19:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb323ok5m24 2026-07-23 18:18:16+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61207

creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sutips2j 2026-07-23 18:17:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...