40021 matches found
EUVD-2026-48775
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...
CVE-2026-64431
Summary of CVE-2026-64431 (Linux kernel NTFS driver): A memory corruption vulnerability arises when post_write_mst_fixup() is called for an invalid index_block after ntfs_ib_write() returns an error. The root cause is that ntfs_icx_ib_sync_write() treated any error as a write failure and invoked ...
CVE-2026-64431
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...
CVE-2026-15425
The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-15425 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)
The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2026-48765
The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-15425
The CVE concerns the Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress (Yoast SEO) vulnerable to Stored Cross-Site Scripting via the Post Slug (post_name) feature. Affected versions: all up to and including 28.0. Root cause: insufficient input sanitization and ...
CVE-2026-15425 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)
The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-15425
The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16800
creationtimestamp| type| source ---|---|--- 2026-07-25 05:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh3jgtywl2d 2026-07-30 06:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrttajhz6g2v...
CVE-2026-16801
creationtimestamp| type| source ---|---|--- 2026-07-25 05:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh3ja54xd2d 2026-07-30 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrtrkv3pae2m...
CVE-2026-66374
creationtimestamp| type| source ---|---|--- 2026-07-25 03:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrgusmo6tm2e...
CVE-2026-58662
creationtimestamp| type| source ---|---|--- 2026-07-25 00:08:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgl7nigny2g 2026-07-26 05:02:38+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n 2026-07-29 00:07:07+00:00| seen|...
CVE-2026-58389
creationtimestamp| type| source ---|---|--- 2026-07-25 00:03:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgkwofnkb2u 2026-07-28 23:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqlcl55wc22...
PT-2026-64475
Name of the Vulnerable Software and Affected Versions Yoast SEO versions prior to 28.1 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with author-level access or higher can inject arbitrary web scripts into pages...
Linux Distros Unpatched Vulnerability : CVE-2026-64431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore...
CVE-2026-66053
creationtimestamp| type| source ---|---|--- 2026-07-24 23:58:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgknpb3y426...
CVE-2026-55970
creationtimestamp| type| source ---|---|--- 2026-07-24 23:48:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgk3r6uqf24...
CVE-2026-55968
creationtimestamp| type| source ---|---|--- 2026-07-24 23:42:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgjqxumx22n 2026-07-29 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqonuqete2i...