262260 matches found
CVE-2026-8590
CVE-2026-8590 affects Spotfire Enterprise (Server modules), Spotfire Enterprise with External Consumers, and Spotfire on Kubernetes. It describes an OAuth2 PKCE bypass for public clients, with affected versions: Enterprise up to 14.0.12, 14.4.2, 14.5.0, 14.6.1–14.8.0; External Consumers up to 14....
CVE-2026-58102
creationtimestamp| type| source ---|---|--- 2026-07-14 13:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmdnba5iy2w 2026-07-14 16:02:17+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqmlefn6c52n 2026-07-15 09:28:04+00:00| seen|...
CVE-2026-15305 TYPO3 CMS - Unrestricted File Upload in Form Framework
Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form definition properties...
CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...
RLSA-2026:38878 Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: os: golang: Go os.Root: Symlink following vulnerability allows directory traversal...
USN-8538-1 alsa-lib vulnerability
It was discovered that alsa-lib incorrectly handled certain ALSA configuration text. An attacker could use this issue to cause alsa-lib to crash, resulting in a denial of service, or possibly execute arbitrary code...
CVE-2026-15416
creationtimestamp| type| source ---|---|--- 2026-07-14 11:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5koihty24 2026-07-20 04:40:33+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2i2vucuw2g 2026-07-20 04:40:35+00:00| seen|...
ROOT-APP-NPM-CVE-2026-4867 CVE-2026-4867 in @rootio/path-to-regexp - Patched by Root
Root has patched CVE-2026-4867 in the @rootio/path-to-regexp package for Root:npm. Multiple fixed versions available...
CVE-2008-4309
creationtimestamp| type| source ---|---|--- 2026-07-14 10:57:13+00:00| seen| https://infosec.exchange/users/certvde/statuses/116917969436241277...
CVE-2026-15678
creationtimestamp| type| source ---|---|--- 2026-07-14 10:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlx4rhw3f2t 2026-07-19 20:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmkpfopr2m...
CVE-2026-3014
Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...
CVE-2026-3014 Remote Code Execution by administrative user on the Management Server
Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...
SUSE-SU-2026:2948-1 Security update for perl-HTML-Parser
This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in decodeentities bsc1267606...
Authentication Bypass
9Router is vulnerable to Authentication Bypass. The vulnerability is due to missing authentication checks for the /codex endpoint, where requests bypass the API key validation before being rewritten to protected API routes, allowing unauthenticated attackers to invoke upstream LLM provider APIs...
CVE-2026-15678 code-projects Online Job Portal DetailJob.php cross site scripting
A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may ...
EUVD-2026-43631
A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may ...
CVE-2026-7640
creationtimestamp| type| source ---|---|--- 2026-07-14 06:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t 2026-07-19 20:28:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o 2026-07-19 20:28:50+00:00| seen|...
RLSA-2026:38503 Moderate: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing...
CVE-2026-11563 Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal
The Word Count and Social Shares WordPress plugin through 1.0 does not validate a user-supplied file path before deletion, nor does it have proper authorization or CSRF checks, allowing any authenticated user, such as a Subscriber, to delete arbitrary files on the server, which can lead to a full...
