CVE-2026-46627

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:26+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpa5zf3m2v...

CVE-2026-46634

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:46+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6ssob226 2026-07-15 09:34:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqog546kbn2u 2026-07-17 15:18:04+00:00| seen|...

CVE-2026-46635

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:36+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6odfv62o...

Cross-site Scripting (XSS)

Overview twig/twig is a flexible, fast, and secure template language for PHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Twig\Profiler\Dumper\HtmlDumper output rendering logic. An attacker can execute arbitrary HTML or JavaScript by controlling template...

XSS in profiler HtmlDumper via unescaped template and profile names

More info at https://symfony.com/cve-2026-47730...

CVE-2026-24215

creationtimestamp| type| source ---|---|--- 2026-05-20 07:06:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbdran45s2k...

CVE-2026-9057

creationtimestamp| type| source ---|---|--- 2026-05-20 07:01:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbdic7ytg2n...

CVE-2026-7460

creationtimestamp| type| source ---|---|--- 2026-05-20 06:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbd7drwum2c...

CVE-2026-24206

creationtimestamp| type| source ---|---|--- 2026-05-20 06:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbn5bfgr2k 2026-06-17 21:20:37+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojakrczmn2e...

Astra Linux – Vulnerability in Chromium

The use of “after free” in web searches in Google Chrome before version 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption through profile destruction...

Astra Linux – Vulnerability in exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was discovered in Exiv2 versions v0.27.4 and earlier. This infinite loop occurs when Exiv2 is used to print the metadata of a specially crafted image file. A...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice. PSP is unregistered twice in the following paths: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow under certain conditions:...

CVE-2026-6549

creationtimestamp| type| source ---|---|--- 2026-05-20 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmb6ivqo4q2a...

CVE-2026-24214

creationtimestamp| type| source ---|---|--- 2026-05-20 04:51:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb4aw6ccr2c 2026-05-20 19:37:20+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmcnputmzy2v 2026-06-22 00:19:59+00:00| seen|...

CVE-2026-43620

creationtimestamp| type| source ---|---|--- 2026-05-20 02:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavryzuxl2q 2026-05-20 04:18:43+00:00| seen| https://vulnerability.circl.lu/bundle/98dfc241-f74a-4ad3-9b5d-a312ab6e6c87 2026-05-20 09:58:24+00:00| seen|...

CVE-2026-8493

creationtimestamp| type| source ---|---|--- 2026-05-20 02:50:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavhqnpz72i...

CVE-2026-6095

creationtimestamp| type| source ---|---|--- 2026-05-20 02:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmav3bxamm2h...

CVE-2026-6871

creationtimestamp| type| source ---|---|--- 2026-05-20 02:39:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmauud2jhc2i...

EUVD-2026-31036

The Oliver POS – A WooCommerce Point of Sale POS plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.4.2.6. The plugin protects its entire /wp-json/pos-bridge/ REST API namespace through the oliverposrestauthentication...

CVE-2026-44790

creationtimestamp| type| source ---|---|--- 2026-05-20 00:16:19+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmamu5rnds2m 2026-06-27 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpbbbc4iiu2n...