CVE-2026-8940

creationtimestamp| type| source ---|---|--- 2026-06-09 07:45:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntpbzu3il2r 2026-06-11 22:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo2auhpoay22...

CVE-2026-34905

creationtimestamp| type| source ---|---|--- 2026-06-09 07:42:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mntp3uzupp2m...

CVE-2026-34031 Apache Answer: The custom avatar was not properly validated

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to...

CVE-2026-34031

CVE-2026-34031 concerns Apache Answer up to version 2.0.0, where the server fails to validate user-supplied image URLs used for profile avatars. This allows embedding arbitrary external content as avatars, potentially enabling unintended external requests and tracking by third-party servers. A fi...

CVE-2026-34031 Apache Answer: The custom avatar was not properly validated

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to...

CVE-2026-34033

creationtimestamp| type| source ---|---|--- 2026-06-09 07:32:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mntojwksmd2c...

CVE-2026-8977

creationtimestamp| type| source ---|---|--- 2026-06-09 07:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntobotd3e24 2026-06-10 03:47:21+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnvsgwabrl22 2026-06-11 14:17:34+00:00| seen|...

CVE-2026-8841

creationtimestamp| type| source ---|---|--- 2026-06-09 07:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntnwdln552e 2026-06-11 13:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnzcouil3n2a...

CVE-2026-8883

creationtimestamp| type| source ---|---|--- 2026-06-09 07:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntnrgmzyq2a 2026-06-10 08:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwbhhbpwf26...

CVE-2026-8902

creationtimestamp| type| source ---|---|--- 2026-06-09 07:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntmuwjlr62h 2026-06-11 16:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnzmqqeu5s2h...

CVE-2026-41849

creationtimestamp| type| source ---|---|--- 2026-06-09 07:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmswmwqn2y...

CVE-2026-11618

creationtimestamp| type| source ---|---|--- 2026-06-09 06:44:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mntluplbgk2v...

GHSA-439X-6767-44CV Spring HATEOAS heap exhaustion through unbounded internal caching

Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 through 2.3.4; 2.4.0 through 2.4.1; 2.5.0 through 2.5.2; 3.0.0 through 3.0.3...

CVE-2026-5068

CVE-2026-5068 affects Zephyr in the Bluetooth host L2CAP LE CoC path. When segmentation is enabled (chan_ops.alloc_buf) and the RX pool’s user_data_size is

CVE-2026-9185

creationtimestamp| type| source ---|---|--- 2026-06-09 06:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mntjfe72uq2k 2026-06-09 07:35:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntoq43xxa2j 2026-06-09 15:05:15+00:00| seen|...

CVE-2026-29167

creationtimestamp| type| source ---|---|--- 2026-06-09 05:44:18+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116718557689163145 2026-06-09 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25 2026-06-09 18:00:00+00:00| seen|...

CVE-2026-41007

Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 through 2.3.4; 2.4.0 through 2.4.1; 2.5.0 through 2.5.2; 3.0.0 through 3.0.3...

CamView installer insecurely loads Dynamic Link Libraries

Overview CamView installer provided by ARUCOM Inc. insecurely loads Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2015-9268 The CVSS evaluation above assume that a victim user is directed to download and place a specially crafted DLL file with the affected installer and t...

CVE-2025-40946

creationtimestamp| type| source ---|---|--- 2026-06-09 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-160-02...

EUVD-2026-35346

Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 through 2.3.4; 2.4.0 through 2.4.1; 2.5.0 through 2.5.2; 3.0.0 through 3.0.3...