GHSA-5R37-QPWQ-2JHH

creationtimestamp| type| source ---|---|--- 2026-04-15 18:59:08+00:00| seen| https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mjklbnicupa2 2026-04-23 21:26:07+00:00| published-proof-of-concept| Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9UsDC-frBku-7BiY...

CVE-2026-6370

creationtimestamp| type| source ---|---|--- 2026-04-15 18:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkl67t4jd2o...

EUVD-2026-22967

A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed this vulnerability in the Cisco Webex Contact Center service, and no customer action is needed. This...

EUVD-2026-22965

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file syst...

EUVD-2026-22951

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate...

EUVD-2026-22953

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerabili...

CVE-2026-30994

creationtimestamp| type| source ---|---|--- 2026-04-15 18:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkiyfnfs42t...

CVE-2026-6314

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjks7ewket2t 2026-04-15 23:26:54+00:00|...

CVE-2026-6315

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:34:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjktxmsdxa2k 2026-04-15 23:26:54+00:00|...

CVE-2026-6316

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:49:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkusi5bdi23 2026-04-15 23:27:00+00:00|...

CVE-2026-6301

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjksmjws7p2r 2026-04-15 23:26:33+00:00|...

CVE-2026-6363

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:39:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkualap2q2t 2026-04-15 23:27:13+00:00| seen|...

org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

A session fixation vulnerability has been identified in Apache Tomcat, affecting its rewrite functionality. If the rewrite valve is enabled for a web application, an attacker can craft a specific URL. If a victim clicks on this malicious URL, their subsequent interaction with the resource will...

org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

An improper input neutralization flaw has been discovered in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

CVE-2026-20161

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file syst...

CVE-2026-5387

creationtimestamp| type| source ---|---|--- 2026-04-15 16:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkebra2h62o 2026-04-15 17:20:59+00:00| published-proof-of-concept| Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM 2026-04-16 10:00:00+00:00| seen|...

CVE-2026-35569

creationtimestamp| type| source ---|---|--- 2026-04-15 16:53:01+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-855c-r2vq-c292 2026-04-15 22:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvp5aemn2r 2026-04-15...

CVE-2026-4682

creationtimestamp| type| source ---|---|--- 2026-04-15 16:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjke7xpblv2x 2026-04-15 17:20:59+00:00| published-proof-of-concept| Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM 2026-04-15 19:48:06+00:00| seen|...

CVE-2026-20059

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate...

CVE-2026-20059

Cisco Unity Connection’s web-based management interface is affected by a reflected XSS vulnerability (CVE-2026-20059). An unauthenticated, remote attacker can lure a user to click a crafted link, exploiting insufficient input validation to execute arbitrary script in the user’s browser or access ...