ROS-20260813-73-0019

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-15141

The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...

GHSA-W62W-66V9-VVGV

creationtimestamp| type| source ---|---|--- 2026-08-12 22:31:56+00:00| seen| https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5 2026-08-13 00:01:14+00:00| seen| https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5...

CVE-2026-73519

creationtimestamp| type| source ---|---|--- 2026-08-12 22:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw6kiup3g2f 2026-08-12 23:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswab4oweq2l 2026-08-13 03:00:31+00:00| seen|...

CVE-2026-73303

creationtimestamp| type| source ---|---|--- 2026-08-12 21:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzmsvtfy2m 2026-08-14 02:20:06+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3msz3uquz5e23...

CVE-2026-19503

CVE-2026-19503 affects MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver. The issue arises from insufficient validation of the scheme for authorization and token endpoints returned in an OIDC issuer’s discovery document, allowing a user connected to an uncontrolled MongoDB deployment using...

CVE-2026-19502

CVE-2026-19502 affects MongoDB SQL Schema Builder CLI. The issue is insufficient redaction of sensitive startup/connection configuration in diagnostic output (stdout and log files), allowing a local user with access to terminals or logs to view authentication material. The documentation provided ...

CVE-2026-19502 Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...

EUVD-2026-57432

Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned automation test results containing trigger.outputs.user.oauth2, broadcast BuilderSocketEvent.AutomationTestProgress to the app room, and stored progress in...

CVE-2026-72742

creationtimestamp| type| source ---|---|--- 2026-08-12 18:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvphplvqo2n...

CVE-2026-18235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-65941

creationtimestamp| type| source ---|---|--- 2026-08-12 16:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jw4cxurkd5kfr 2026-08-12 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm7joobz2y...

CVE-2026-69105

creationtimestamp| type| source ---|---|--- 2026-08-12 16:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/h5hgifcm5ha6z 2026-08-12 17:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm7cutg42t...

CVE-2026-68446

A flaw was found in the drm/vmwgfx component of the Linux kernel. This vulnerability arises from insufficient validation of the vmwsurfacemetadata::arraysize field, which is supplied by userspace. An attacker could exploit this by providing a malformed arraysize value, potentially leading to...

CVE-2026-66380

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

CVE-2026-15045

The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkou...

EUVD-2026-57089

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...