EUVD-2026-37573

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-37651

Unauthenticated Cross Site Scripting XSS in Auto Repair = 22.6 versions...

EUVD-2026-37542

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37462

Contributor PHP Object Injection in Avada = 3.15.3 versions...

EUVD-2024-55638

Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from n/a through 1.3.7...

EUVD-2026-37246

Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS...

EUVD-2026-37388

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. Supported versions that are affected are V15 and V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Enterprise...

EUVD-2026-37336

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-37453

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-32652

creationtimestamp| type| source ---|---|--- 2026-06-17 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwvvb3cm2j...

CVE-2026-35069

creationtimestamp| type| source ---|---|--- 2026-06-17 18:16:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwb5s5iv2s...

NPM: webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

NPM: webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies vulnerability discovered by ? in WordPress Npm webpack-dev-server versions 5.2.5...

CVE-2026-42055

creationtimestamp| type| source ---|---|--- 2026-06-17 17:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiunvadrb24 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen|...

ROOT-APP-MAVEN-CVE-2024-27309 CVE-2024-27309 in io.root.org.apache.kafka:kafka-metadata - Patched by Root

Root has patched CVE-2024-27309 in the io.root.org.apache.kafka:kafka-metadata package for Root:Maven. Multiple fixed versions available...

CVE-2026-9678

creationtimestamp| type| source ---|---|--- 2026-06-17 17:10:11+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiskw2as22g 2026-06-18 15:59:05+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n6k5o27...

CVE-2022-44462

creationtimestamp| type| source ---|---|--- 2026-06-17 16:27:22+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3moiq6fov5l2c...

CVE-2026-49268

creationtimestamp| type| source ---|---|--- 2026-06-17 15:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moimkre7522k 2026-06-18 17:05:17+00:00| seen| https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y 2026-06-22 00:31:29+00:00| seen|...

EUVD-2026-37739

picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run function, allowing attackers to achieve arbitrary code execution via exec. Attackers can craft malicious pickle files calling profile.runstatement to execute arbitrary...

CVE-2026-49081

creationtimestamp| type| source ---|---|--- 2026-06-17 14:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moikekc6sz2j...

CVE-2026-54807

creationtimestamp| type| source ---|---|--- 2026-06-17 14:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moijsmuwzq2j 2026-07-16 19:00:30+00:00| seen| Telegram/qbVPVzOZ-t5tkQsHPqjzf9oQcpaZWyf0b6GUkkIlr12jYk 2026-07-16 19:00:31+00:00| seen|...