EUVD-2026-62567

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-20232

The web-based management interface of Cisco IE 1000 Series Switches fails to validate user-supplied input, enabling an authenticated attacker to inject malicious script into specific pages that executes in another user's session (stored XSS). CVSS 5.4 (MEDIUM) requires valid credentials and user ...

CVE-2026-73347

creationtimestamp| type| source ---|---|--- 2026-08-19 15:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth2dxahnq2e...

gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR High Dynamic Range files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file,...

CVE-2026-19490

creationtimestamp| type| source ---|---|--- 2026-08-19 13:38:22+00:00| seen| https://bsky.app/profile/samilaiho.com/post/3mtgu422mv22l 2026-08-19 15:10:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgza5tnvr2m 2026-08-19 15:23:22+00:00| seen|...

CVE-2026-74402

A flaw was found in the Linux kernel's atmel-sha204a cryptographic hardware random number generator HWRNG driver. Improper buffer management in both blocking and non-blocking paths causes the driver to fail in providing valid entropy. This occurs because the buffer is read starting from byte 1, a...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified several vulnerabilities in the Oracle Commerce Platform version 11.4.0. These vulnerabilities allow unauthorized attackers with network access to perform critical actions without authentication. This includes gaining unauthorized access to sensitive data, modifying, deleting...

CVE-2026-15446 EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content

The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15421

The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-78493

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

PT-2026-78502

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues related to insufficiently protected credentials were identified during an internal security review. These issues fall under the category of CWE-522, which refers to th...

ROS-20260819-73-0044

The vulnerability in perl-Image-ExifTool is related to insufficient neutralization of special elements in the request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-78522

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...

CVE-2026-70855

creationtimestamp| type| source ---|---|--- 2026-08-18 22:21:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfauukqmo2e 2026-08-19 06:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg5c5i2ru23 2026-08-19 17:48:06+00:00| seen|...

CVE-2026-62626

creationtimestamp| type| source ---|---|--- 2026-08-18 22:18:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaomzxms2b 2026-08-19 04:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfwljbyl32e 2026-08-19 17:19:46+00:00| seen|...

CVE-2026-62588

creationtimestamp| type| source ---|---|--- 2026-08-18 22:16:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfalacoa72p 2026-08-19 03:40:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfsof32zy2f 2026-08-19 17:45:57+00:00| seen|...

CVE-2026-62544

creationtimestamp| type| source ---|---|--- 2026-08-18 22:15:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfakgn7oe2u 2026-08-19 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4h5k2r2t 2026-08-19 17:48:30+00:00| seen|...

CVE-2026-61034

creationtimestamp| type| source ---|---|--- 2026-08-18 22:13:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfagbk7z72p 2026-08-19 02:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfn3korbo2j 2026-08-19 17:17:06+00:00| seen|...

CVE-2026-55211

creationtimestamp| type| source ---|---|--- 2026-08-18 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf6knhztq25...

CVE-2026-71036

Oracle Commerce version 11.4.0 Experience Manager component is vulnerable to an unauthenticated, network-accessible attack (CVSS 9.1) allowing full confidentiality and integrity compromise. Oracle's August 2026 CPU advisory provides patch details; no exploitation evidence is present in the provid...