65442 matches found
CVE-2026-7509
creationtimestamp| type| source ---|---|--- 2026-05-22 06:58:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgeamfjm22k 2026-05-25 04:25:55+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnn56cp2o2s...
CVE-2026-9104
creationtimestamp| type| source ---|---|--- 2026-05-22 06:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgdxnw2x32k...
CVE-2026-9053
creationtimestamp| type| source ---|---|--- 2026-05-22 06:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgcuvhi3j2e...
CVE-2026-6394
creationtimestamp| type| source ---|---|--- 2026-05-22 06:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgcs2lkaa2a...
CVE-2026-46595
creationtimestamp| type| source ---|---|--- 2026-05-22 06:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgc4lusjl2k 2026-07-15 16:40:07+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5wvyuvz2h...
CVE-2026-46597
creationtimestamp| type| source ---|---|--- 2026-05-22 06:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbwgulo32c 2026-06-26 13:42:31+00:00| seen| https://gist.github.com/alon710/0234a3b8537da177958a0a725a5f30b9...
CVE-2026-46598
creationtimestamp| type| source ---|---|--- 2026-05-22 06:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbtjxtaj2k...
GHSA-JQQ5-8PX3-9M6M
creationtimestamp| type| source ---|---|--- 2026-05-22 06:10:50+00:00| seen| https://gist.github.com/alon710/1dd7eb9b2d2403233c4fe934b5852750...
CVE-2026-6391
creationtimestamp| type| source ---|---|--- 2026-05-22 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmg7gqbumh2l...
CVE-2026-8245
creationtimestamp| type| source ---|---|--- 2026-05-22 02:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmfwclbti72p...
EUVD-2026-31380
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with...
GHSA-PCRH-GJ77-J4MW Concrete CMS is vulnerable to Stored XSS via external-link page cvName
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized...
BentoML 后置链接漏洞
BentoML is an open-source model service library developed by BentoML. It is used to build high-performance and scalable artificial intelligence applications using Python. Versions of BentoML prior to 1.4.38 contained a post-link vulnerability. This vulnerability stemmed from the fact that the bui...
PT-2026-42791
Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attacker-controlled domain via a crafted login link. This issue affects : Devolutions Server 2026.1.6.0 through 2026.1.16.0 Devolutions...
PT-2026-42832
Name of the Vulnerable Software and Affected Versions TP-Link range extenders affected versions not specified Description An authentication logic flaw allows an unauthenticated attacker on an adjacent network to reset the administrator password due to insufficient validation of a login parameter...
PT-2026-42752
Name of the Vulnerable Software and Affected Versions Sync-in versions prior to 2.3 Description An issue exists in the URL download feature where the private IP blocklist regex fails to match IPv4-mapped IPv6 addresses, such as ::ffff:127.0.0.1. On dual-stack systems, Node.js may report a socket'...
Fedora 44 : cockpit (2026-ac9d9c87c8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ac9d9c87c8 advisory. Automatic update for cockpit-362-1.fc44. Changelog for cockpit Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code...
Unity Linux 20.1070e Security Update: velocity-tools (UTSA-2026-016718)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016718 advisory. The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an X...