CVE-2026-60284

creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrmubtc7z32v...

CVE-2026-60277

creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnf2bur232i...

CVE-2026-60193

creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60169

creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-46923

creationtimestamp| type| source ---|---|--- 2026-07-23 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65916 CyberPanel Missing Authorization in cancelBackupCreation Handler

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...

CVE-2026-48533

CVE-2026-48533 is rejected and not an active vulnerability entry.

GHSA-5QJQ-93H5-HRGP pypdf: Possible large memory usage for wrong image dimensions

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...

CVE-2026-65537

creationtimestamp| type| source ---|---|--- 2026-07-23 14:44:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrd3a2mgit2y 2026-08-12 11:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msuyvgbptv2r...

Improper Check for Unusual or Exceptional Conditions

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the getToken function. An attacker can cause the application to throw an unhandled exception and disrupt service availability by sending...

DEBIAN-CVE-2026-65901

DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...

UBUNTU-CVE-2026-65899

DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTEDTYPESPOLICY. A later caller that requests RETURNTRUSTEDTYPE output receives a TrustedHTML...

GHSA-5QHF-9PHG-95M2 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: superset, k8s-sidecar, kubeflow-jupyter-web-app, mlflow, mitmproxy, py3-cassandra-medusa, kserve, kubeflow-volumes-web-app, kubeflow-pipelines, datadog-agent, airflow, kubeflow-pipelines-visualization-server...

CVE-2026-14282

creationtimestamp| type| source ---|---|--- 2026-07-23 13:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcyizk2jv2i 2026-08-13 03:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97797 2026-08-14 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-65687

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2022-32287 and CVE-2023-39913 in FileNet Content Manager (FNCM) / IBM Content Cortex(CCx) component Content Search Services (CSS) / Enterprise Content Management Text Search (ECMTS)

Summary Apache uimaj-core.jar security vulnerability CVE-2022-32287 and CVE-2023-39913 in FileNet Content Manager FNCM / IBM Content CortexCCx component Content Search Services CSS / Enterprise Content Management Text Search ECMTS Vulnerability Details Refer to the security bulletins listed in th...

CVE-2026-65912

DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...

CVE-2026-65902

DOMPurify 3.4.7 fixes a mutation pollution vulnerability. Affected: DOMPurify

CVE-2026-65898

DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...