2927 matches found
CVE-2026-32555
creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuftb6did2m 2026-08-25 00:07:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtujlzxlnb25 2026-08-25 01:12:41+00:00| seen|...
CVE-2026-28171
creationtimestamp| type| source ---|---|--- 2026-08-24 18:14:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mttvufexuw2i 2026-08-24 18:14:47+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117151843283303878...
CVE-2025-63080
creationtimestamp| type| source ---|---|--- 2026-08-24 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2025-63080 2026-08-24 12:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/baauzarrlu2nc...
OpenMetaData - SpEL Injection in PUT /api/v1/policies
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. CompiledRule::validateExpression is also called from PolicyRepository.prepare. prepare is called from...
MINI-524C-7HXG-VW92
Bulletin has no description...
CVE-2026-62621
creationtimestamp| type| source ---|---|--- 2026-08-18 22:17:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfanuck5i25 2026-08-19 04:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfvhrlama25 2026-08-19 17:19:58+00:00| seen|...
CVE-2026-73359
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
CVE-2026-73359 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
EUVD-2026-60783
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
CVE-2026-73359
The WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin (versions ≤4.3.9) has a Subscriber-level stored XSS vulnerability; a low-privilege authenticated user can inject scripts that execute in other users' browsers, rated MEDIUM (CVSS 6.5). No patch version or exploitation evidence is provi...
CVE-2026-73359
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
WordPress Cookie Banner for GDPR / CCPA plugin <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via 'regionArray' Parameter vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.5...
CVE-2026-19932
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
EUVD-2026-59848
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-19932
The CVE affects DefaultFuction Notice-System-Managent 2.0, specifically the GroovyShell.evaluate function in the /execute path of the NoticeController. The underlying root cause is code injection via that evaluation, enabling a remote attacker to trigger exploitation. Public exploits are indicate...
CVE-2026-70623
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-71849 Hono: Proxy Helper does not remove response headers listed in the `Connection` header
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header...
CVE-2026-71231
creationtimestamp| type| source ---|---|--- 2026-08-05 11:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgfwm5ur2f...