265671 matches found
BELL-CVE-2026-53132
Bulletin has no description...
CVE-2026-9677
The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariffinfourl setting before outputting it in the frontend HTML via the generateshariff function, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...
CVE-2025-60465
creationtimestamp| type| source ---|---|--- 2026-06-27 03:12:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaigmvxot2a...
GHSA-R2JR-M2RH-F5HG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W6C6-C85G-MMV6 vulnerabilities
Vulnerabilities for packages: zot, crossplane, slsa-verifier, kyverno, teleport, trivy-operator, aactl, kubescape, ratify, kyverno-notation-aws, trivy, policy-controller...
EUVD-2026-39927
A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or...
External Control of File Name or Path
Overview @pnpm/installing.deps-resolver is a Resolves dependency graph of a package Affected versions of this package are vulnerable to External Control of File Name or Path via the lockfile alias handling process. An attacker can overwrite files or directories outside the intended nodemodules...
RLSA-2023:2786 Moderate: wayland security, bug fix, and enhancement update
Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...
wayland security, bug fix, and enhancement update
An update is available for wayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Wayland is a protocol for a compositor to talk to its clients, as well as a C...
PT-2026-53037
HCL Traveler for Microsoft Outlook HTMO is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application...
Apache Kerby Kerberos Pre-authentication Bypass Vulnerability
Apache Kerby is a Java implementation of the Kerberos protocol, primarily used for providing authentication and authorization services. Apache Kerby has a vulnerability related to bypassing Kerberos pre-authentication. This vulnerability arises when users send PA-DATA that includes unrecognized o...
python311-pypdf-6.14.0-1.1 on GA media (moderate)
python311-pypdf-6.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11113-1 Rating: moderate Cross-References: CVE-2026-54651 CVSS scores: CVE-2026-54651 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-54651 SUSE : 6.7...
EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2475)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...
EulerOS 2.0 SP15 : pyOpenSSL (EulerOS-SA-2026-2499)
According to the versions of the pyOpenSSL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback t...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2515)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...
EUVD-2026-39484
pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes...
EUVD-2026-38067
Subsonic API: any authenticated user can delete or read any other user's playlist IDOR...
CVE-2026-52780
creationtimestamp| type| source ---|---|--- 2026-06-26 23:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa42cxqt52c 2026-06-28 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenvjmkmg2v...
CVE-2026-52783
creationtimestamp| type| source ---|---|--- 2026-06-26 23:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3tm22wn2s 2026-06-28 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7ufns52x 2026-06-29 14:45:10+00:00| seen|...