OPENSUSE-SU-2026:11678-1 MozillaThunderbird-140.15.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11682-1 ffmpeg-8-8.1.2-3.1 on GA media

These are all security issues fixed in the ffmpeg-8-8.1.2-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-85050

creationtimestamp| type| source ---|---|--- 2026-09-03 20:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mund7xzpsj2l 2026-09-03 22:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munhls2aoz2g 2026-09-04 04:46:21+00:00| seen|...

CVE-2026-85216

creationtimestamp| type| source ---|---|--- 2026-09-03 16:08:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mumthxbb7z2b 2026-09-03 16:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumup3524j2w 2026-09-03 16:34:02+00:00| seen|...

CVE-2026-3852

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

CVE-2026-59346

creationtimestamp| type| source ---|---|--- 2026-09-03 09:23:29+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mum4u7nhcr2x 2026-09-03 23:24:06+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3munltczhhi2c 2026-09-04 05:02:17+00:00| seen|...

CVE-2026-20280

creationtimestamp| type| source ---|---|--- 2026-09-03 08:46:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 11:04:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mumcje5hr22b 2026-09-03 11:04:47+00:00| seen|...

CVE-2026-3852

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skype_url shortcode attribute in the Social Media Follow module, affecting all versions up to and including 4.27.6 . The root cause is a three-part sanitization failure: the field is excluded from the $url_options w...

EUVD-2026-70362

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

CVE-2026-3852 Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

[SECURITY] Fedora 44 Update: mingw-gstreamer1-1.28.6-1.fc44

GStreamer is a streaming-media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plug-in-based architecture means that new data types...

CVE-2026-78689

creationtimestamp| type| source ---|---|--- 2026-09-02 18:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukjonpqaf2t 2026-09-02 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muklimnqxi2o 2026-09-02 19:12:02+00:00| seen|...

CVE-2026-82404

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbhhcji2a 2026-09-02 19:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d72zrvwkyefas 2026-09-03 20:50:05+00:00| seen|...

CVE-2026-20274

creationtimestamp| type| source ---|---|--- 2026-09-02 16:36:40+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117202419724203546 2026-09-02 18:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukjp7pzgv22 2026-09-02 20:40:07+00:00| seen|...

DRUPAL-CONTRIB-2026-129

A module to import media files into media library. The import folder is a plain textfield with no validation. Point it at any directory the web user can read, and the importer copies every file whose extension matches a selected media type into the public files directory and publishes it as a Med...

EUVD-2026-68888

Sulu: Media move/update authorization bypass IDOR...

CVE-2026-81286

creationtimestamp| type| source ---|---|--- 2026-09-02 14:07:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4ahvex52t 2026-09-02 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkeslksq22...

CVE-2026-18924

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-08 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzfvusbze2b 2026-09-08 20:03:22+00:00| seen|...

CVE-2026-19475

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...

CVE-2026-19723

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...