BELL-CVE-2026-64431 CVE-2026-64431 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64260

Bulletin has no description...

BELL-CVE-2026-64532

Bulletin has no description...

CVE-2026-13690

The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor login handler, allowing an attacker who already knows a user's credentials to bypass the second authentication factor and log in as that user...

CVE-2026-12144

creationtimestamp| type| source ---|---|--- 2026-07-29 03:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwzlx4dh2a 2026-07-29 03:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxacujlm2g 2026-07-29 07:00:17+00:00| seen|...

CVE-2026-18072

creationtimestamp| type| source ---|---|--- 2026-07-29 02:48:40+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrqvz4d6i72p 2026-07-29 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrra5ix6zt2y 2026-07-29 06:43:40+00:00| seen|...

CVE-2026-54639

creationtimestamp| type| source ---|---|--- 2026-07-29 02:31:53+00:00| seen| https://gist.github.com/alon710/f56e7fea90184a0067b486a540ca3738...

GHSA-32XH-3X3C-6G6H vulnerabilities

Vulnerabilities for packages: eco-python-curl...

GHSA-HF34-V47H-W6M3 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-8458 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

PT-2026-65855

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in text and mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarkup,...

PT-2026-65960

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

PT-2026-65719

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue...

PT-2026-65818

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A heap-based overflow occurs when Autodesk AutoCAD parses a maliciously crafted DXF file. This issue allows an attacker to cause a system crash, read sensitive information, or execut...

CVE-2026-14959

creationtimestamp| type| source ---|---|--- 2026-07-28 23:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqk2jwuqs2i 2026-07-28 23:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlsmo2et2i...

CVE-2026-57510

creationtimestamp| type| source ---|---|--- 2026-07-28 23:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjsueq3f2x 2026-07-29 12:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrwmcj6tp2y...

CVE-2026-14512

creationtimestamp| type| source ---|---|--- 2026-07-28 23:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjg6eoce2s 2026-07-28 23:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlwad67k2a 2026-07-30 05:15:07+00:00| seen|...

CVE-2026-62325

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:41+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm 2026-07-28 23:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5cwt5q2y 2026-07-29...

CVE-2026-54659

Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as .yml path components, allowing untrusted params:locale values with absolute paths or ../ sequences to create a file...

CVE-2026-54659

Pagy (Ruby gem) contains a vulnerability in the I18n locale handling prior to 43.5.6: Pagy::I18n.locale= stores locale values verbatim and later uses them as .yml path components, enabling untrusted params[:locale] values with absolute paths or ../ sequences to probe file existence/readability of...