EUVD-2026-40342

ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2026-48307

ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2026-13135

creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpjajjku442c 2026-07-01 02:50:45+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0819...

CVE-2026-10817

creationtimestamp| type| source ---|---|--- 2026-06-30 14:35:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7yqkhca2m 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

CVE-2026-58016

creationtimestamp| type| source ---|---|--- 2026-06-30 14:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7gtiwvm2t 2026-07-02 05:19:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnbtzxrwh2k 2026-07-21 12:01:08+00:00| seen|...

CVE-2026-58012

creationtimestamp| type| source ---|---|--- 2026-06-30 14:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj775x7sw2v 2026-07-21 12:00:56+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5bj5er2t 2026-07-29 12:01:35+00:00| seen|...

CVE-2017-7876

creationtimestamp| type| source ---|---|--- 2026-06-30 14:18:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78f5676b-e9fb-4677-aaf3-240da91541ff 2026-09-16 11:00:32+00:00| exploited|...

WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Simple Link Directory versions = 15.0.5...

CVE-2026-14161

creationtimestamp| type| source ---|---|--- 2026-06-30 14:12:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpj6oxbel72t 2026-07-01 02:34:08+00:00| seen| https://www.twcert.org.tw/en/cp-139-11012-63761-2.html...

CVE-2026-58116

creationtimestamp| type| source ---|---|--- 2026-06-30 14:11:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6n3wm232o 2026-07-02 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpn5sja33323 2026-07-05 14:37:40+00:00| seen|...

CVE-2026-53433

creationtimestamp| type| source ---|---|--- 2026-06-30 14:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6i7jyks2z 2026-07-01 02:37:36+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53432 2026-07-03 12:15:16+00:00| seen|...

CVE-2026-44946

creationtimestamp| type| source ---|---|--- 2026-06-30 13:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5usfmcc2z 2026-06-30 23:31:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116841661870307967 2026-07-03 06:07:07+00:00| seen|...

CVE-2026-8451

creationtimestamp| type| source ---|---|--- 2026-06-30 13:52:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5lsqeey2j 2026-06-30 19:43:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mpjr6j2ym72j 2026-06-30 19:51:27+00:00| seen|...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

UBUNTU-CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

EUVD-2026-40306

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

CVE-2026-58374 describes a bounds-check vulnerability in hostapd (before 2.12) where an MLO association request can cause an out-of-bounds write due to parsing a link_id value of 15, while the storage only supports IDs 0–14. This unauthenticated, range-limited attacker could trigger a denial of s...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...