MINI-4FX5-P99V-RM23

Bulletin has no description...

CVE-2026-12556

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

CGA-7FFR-424V-8J2C

Bulletin has no description...

MINI-9H9M-W797-M8P8

Bulletin has no description...

CVE-2026-20355

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-53635

Open edX Platform is affected by an insufficient permission check in the set_course_mode_price() view at lms/djangoapps/instructor/views/instructor_dashboard.py:430. The endpoint is protected only by @login_required and performs no course-level authorization, meaning any authenticated user —inclu...

CVE-2026-53635 Open edX Platform: Insufficient Permission on set_course_mode_price()

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function setcoursemodeprice at lms/djangoapps/instructor/views/instructordashboard.py:430 is decorated only with @loginrequired and performs no course-level permission check. An...

CVE-2026-53635 Open edX Platform: Insufficient Permission on set_course_mode_price()

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function setcoursemodeprice at lms/djangoapps/instructor/views/instructordashboard.py:430 is decorated only with @loginrequired and performs no course-level permission check. An...

DRUPAL-CONTRIB-2026-128

This module enables you to log the emails sent by Mailer Plus as content entities, so they can be reviewed at Reports Mail log. The module doesn't sufficiently redact the content of the emails it logs. Account related emails are stored with their one-time login links intact, so any user who can...

MINI-5W9H-7PXH-26QQ

Bulletin has no description...

MINI-7R95-VMM8-XF8G

Bulletin has no description...

MINI-H94Q-W573-55MV

Bulletin has no description...

MINI-JQJF-HQ9W-9XJV

Bulletin has no description...

MINI-F443-QPCW-G3GQ

Bulletin has no description...

MINI-C483-WP67-V463

Bulletin has no description...

MINI-787H-MJ3Q-7J6M

Bulletin has no description...

CVE-2026-82209

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-09 20:01:31+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mv4dcnqryc2u...

CVE-2026-12704

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422 2026-09-16 12:16:45+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mvn4lypyyj2j...

CVE-2026-18672

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...

CVE-2026-84806 Kimai before 2.63.0 Authorization Bypass via Team Access Endpoints

Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to grant team access to customers, projects, or activities. Attackers can exploit insufficient permission checks by sending...