CVE-2026-13151

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...

CVE-2026-60095

Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlinkserver service that allows unauthenticated remote attackers to overwrite the saved return address by supplying an oversized listenuuid field that is measure...

CVE-2026-9021

creationtimestamp| type| source ---|---|--- 2026-07-09 12:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7nbzfdnc2x...

CVE-2026-58307

creationtimestamp| type| source ---|---|--- 2026-07-09 11:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7ldswbma2e...

CVE-2026-58303

Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before b30b63fc63b403907d8137da1c65aaa4521fe74e...

CVE-2026-50644

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

UBUNTU-CVE-2026-12590

Impact: In body-parser versions prior to 1.20.6 1.x line and 2.3.0 2.x line, when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit as thei...

OESA-2026-2960 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

CVE-2026-56460

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system...

CLEANSTART-2026-XN14360 Security fixes for CVE-2026-42504 applied in versions: 3.31.4-r3

Security vulnerability affects the calico package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-58303

The CVE-2026-58303 entry concerns Samsung Open Source Escargot. It is a stack-based buffer overflow affecting Escargot versions prior to b30b63fc63b403907d8137da1c65aaa4521fe74e. The vulnerability is triggered locally and leads to high availability impact, with confidentiality impact listed as no...

CLEANSTART-2026-CT15102 Security fixes for CVE-2026-42504 applied in versions: 2.17.0-r3

Security vulnerability affects the kube-state-metrics package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ML74336 Security fixes for CVE-2026-42504 applied in versions: 1.26.8-r4

Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XN78570 Security fixes for CVE-2026-42504 applied in versions: 3.11.3-r2

Security vulnerability affects the prometheus package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-12428

The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getallvalues function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permissioncallback only verifies the...

EUVD-2026-42561

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers t...

CVE-2026-2398

creationtimestamp| type| source ---|---|--- 2026-07-09 09:02:53+00:00| seen| https://gist.github.com/jenaiho/1522a468329f9f547ecf71750af6133b 2026-07-09 09:28:22+00:00| seen| https://gist.github.com/jenaiho/5dd59edf2dcf415acd7b0bfc401e6173 2026-07-10 22:42:22+00:00| seen|...

Improper Authentication

github.com/coder/coder is vulnerable to Improper Authentication. The vulnerability is due to improper OIDC email-based account linking and incorrect handling of the emailverified claim, which allows an attacker to authenticate with a malicious or unverified OIDC identity and take over another...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LG10684 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r0

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin package. This issue is resolved in later releases. See references for vulnerability details...