CVE-2026-6301

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjksmjws7p2r 2026-04-15 23:26:33+00:00|...

CVE-2026-6363

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:39:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkualap2q2t 2026-04-15 23:27:13+00:00| seen|...

CVE-2026-6316

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:49:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkusi5bdi23 2026-04-15 23:27:00+00:00|...

org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

A session fixation vulnerability has been identified in Apache Tomcat, affecting its rewrite functionality. If the rewrite valve is enabled for a web application, an attacker can craft a specific URL. If a victim clicks on this malicious URL, their subsequent interaction with the resource will...

org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

An improper input neutralization flaw has been discovered in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

CVE-2026-20161

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file syst...

CVE-2026-5387

creationtimestamp| type| source ---|---|--- 2026-04-15 16:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkebra2h62o 2026-04-15 17:20:59+00:00| published-proof-of-concept| Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM 2026-04-16 10:00:00+00:00| seen|...

CVE-2026-35569

creationtimestamp| type| source ---|---|--- 2026-04-15 16:53:01+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-855c-r2vq-c292 2026-04-15 22:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvp5aemn2r 2026-04-15...

CVE-2026-4682

creationtimestamp| type| source ---|---|--- 2026-04-15 16:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjke7xpblv2x 2026-04-15 17:20:59+00:00| published-proof-of-concept| Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM 2026-04-15 19:48:06+00:00| seen|...

CVE-2026-20059

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate...

CVE-2026-20059

Cisco Unity Connection’s web-based management interface is affected by a reflected XSS vulnerability (CVE-2026-20059). An unauthenticated, remote attacker can lure a user to click a crafted link, exploiting insufficient input validation to execute arbitrary script in the user’s browser or access ...

CVE-2026-20060

CVE-2026-20060 affects Cisco Unity Connection’s web-based management interface. It is a open-redirect vulnerability caused by improper input validation of HTTP request parameters, enabling an unauthenticated, remote attacker to persuade a user to click a crafted link and be redirected to a malici...

CVE-2026-20060 Cisco Unity Connection Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerabili...

CVE-2026-20170

A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed this vulnerability in the Cisco Webex Contact Center service, and no customer action is needed. This...

CVE-2026-20161 Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file syst...

CVE-2026-20161

CVE-2026-20161 — Cisco ThousandEyes Enterprise Agent : A vulnerability in the CLI could allow an authenticated, low-privilege local attacker to overwrite arbitrary files on the local system by placing a symbolic link in a specific location. The root cause is improper access controls on local file...

CVE-2026-20161 Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file syst...

CVE-2026-20161

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file syst...

CVE-2026-3590

creationtimestamp| type| source ---|---|--- 2026-04-15 15:28:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjk7jllb5u2k 2026-04-16 11:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcwqgahd2b...

CVE-2026-4134

creationtimestamp| type| source ---|---|--- 2026-04-15 15:20:23+00:00| published-proof-of-concept| Telegram/uZRx6HZozAc0thMR3KKbNyvZVgKIzeeLzgWMgVKyfbYH8EA 2026-04-15 16:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkbeqiq7i2o...