Updated libreoffice packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap buffer overflow in DXF polyline import. CVE-2026-6039 Heap use-after-free in ODF number-format blank-width parsing. CVE-2026-6040 Heap buffer overflow in EMF+ gradient brush import. CVE-2026-6045 Stack buffer overflow in PPT presentation...

Malicious code in a1426kt-prime-number (RubyGems)

--- Credit: OpenSSF source...

CVE-2026-54466

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...

MINI-79WV-265X-5R66

Bulletin has no description...

CVE-2026-13082

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a by default six-character string. The built-in rand function is...

CVE-2018-12419

creationtimestamp| type| source ---|---|--- 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/80 2026-07-18 00:00:26+00:00| seen| https://t.me/makrushin/80...

CVE-2026-15759

The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escapin...

CVE-2026-15759 ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes

The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escapin...

CVE-2026-15759

Summary: CVE-2026-15759 affects the WordPress plugin “ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form.” The vulnerability is a Stored Cross-Site Scripting (XSS) via the 'number' and 'group' Shortcode Attributes in all versions up to and including 3.5.1 due to insuf...

EUVD-2026-45135

The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escapin...

CVE-2026-15759: Improper Neutralization of Input During Web Page Generation

The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escapin...

PT-2026-60712

The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escapin...

CVE-2026-44435

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total number of valid handshake messages received over a CRYPTO stream of a single packet number space exceeds 32KB, causing a...

CVE-2026-44435

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total number of valid handshake messages received over a CRYPTO stream of a single packet number space exceeds 32KB, causing a...

SUSE-SU-2026:3078-1 Security update for rpcbind

This update for rpcbind fixes the following issue - Fix several memory leaks and buffer overflow bsc1267212...

MINI-4J9F-H4FP-2555

Bulletin has no description...

MINI-MQ8J-F2MX-HPV2

Bulletin has no description...

MINI-38MP-F2JQ-J68V

Bulletin has no description...

CVE-2026-45533

creationtimestamp| type| source ---|---|--- 2026-07-16 00:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzaxejrl2h...

CVE-2026-13741: Improper Privilege Management

The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the digupdatewpwccustomfields function. This makes it possible for authenticat...