CVE-2024-23565

CVE-2024-23565 affects HCL Aftermarket EPC. The vulnerability arises from a lack of proper mail-rate limiting in the Forget Password workflow, allowing email flooding by a human attacker or automated process (virus/bot). Consequences cited include potential denial of service and logic/other impac...

EUVD-2024-55660

HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force , automated attacks & account enumeration...

CVE-2026-13082

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a by default six-character string. The built-in rand function is...

EUVD-2026-45170

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...

kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture aloop driver. This Use-After-Free UAF vulnerability occurs when loopbackcheckformat stops the capture side during a format change, while a concurrent close operation detaches or frees the runtime. An attacker could...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

CVE-2026-13410

CVE-2026-13410 affects Dancer::Plugin::Auth::Google for Perl up to version 0.07, where TLS verification is disabled in the library and the default user agent SSL_verify_mode is turned off. This enables a network (MITM) attacker between the Dancer app and googleapis.com to intercept the OAuth2 tok...

CVE-2026-15714

creationtimestamp| type| source ---|---|--- 2026-07-17 11:02:39+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtlzeaocf23 2026-07-17 11:02:42+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtlzhg67b24 2026-07-17 11:02:45+00:00| seen|...

CVE-2026-59694

creationtimestamp| type| source ---|---|--- 2026-07-17 10:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtlcdzsam2r...

ROOT-APP-MAVEN-CVE-2023-6378 CVE-2023-6378 in io.root.ch.qos.logback:logback-classic - Patched by Root

Root has patched CVE-2023-6378 in the io.root.ch.qos.logback:logback-classic package for Root:Maven. Multiple fixed versions available...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-11966

creationtimestamp| type| source ---|---|--- 2026-07-17 08:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcjkfvu62x...

CVE-2026-59885

creationtimestamp| type| source ---|---|--- 2026-07-17 08:05:29+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc4kcbi523 2026-07-17 08:06:29+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc6dlakl2h 2026-07-17 08:06:31+00:00| seen|...

CVE-2018-14816

creationtimestamp| type| source ---|---|--- 2026-07-17 07:00:04+00:00| seen| Telegram/pS736wy1q4JTpyQ27GThkrd-KM7MPYTW9rtTHg4MZzf-Jty 2026-07-18 00:00:37+00:00| seen| Telegram/pS736wy1q4JTpyQ27GThkrd-KM7MPYTW9rtTHg4MZzf-Jty...

CVE-2026-62764

creationtimestamp| type| source ---|---|--- 2026-07-17 06:34:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqt4zjdzoo2e 2026-07-17 14:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxfpq6gq2i...

CVE-2026-13402

CVE-2026-13402 affects the Royal Addons for Elementor WordPress plugin (before 1.7.1063). The vulnerability stems from the REST endpoints not checking the post status of menu items or the templates they reference, which allows unauthenticated users to retrieve rendered HTML content of private or ...

CVE-2026-46054 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46054 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-62208

OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization. Impact depends on the operator's...