CVE-2026-45831

creationtimestamp| type| source ---|---|--- 2026-06-12 18:00:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4czl2rkz2j...

CVE-2026-45830

creationtimestamp| type| source ---|---|--- 2026-06-12 17:58:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4cvvqt7s2f...

CVE-2026-50088

creationtimestamp| type| source ---|---|--- 2026-06-12 17:36:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4bppdfds2q...

CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...

CVE-2026-50009

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the...

CVE-2026-54133

creationtimestamp| type| source ---|---|--- 2026-06-12 16:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44g5a3ue2n 2026-06-12 18:24:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4eeqak4c2t 2026-06-15 19:07:08+00:00| seen|...

CVE-2026-53787

creationtimestamp| type| source ---|---|--- 2026-06-12 16:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44fvvomc26 2026-06-14 23:15:44+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvlueltg25 2026-06-15 16:28:58+00:00| seen|...

CVE-2026-6853

creationtimestamp| type| source ---|---|--- 2026-06-12 16:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44dzous22q 2026-06-12 17:26:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4b5scnsk2l 2026-06-14 23:15:37+00:00| seen|...

GHSA-8HG8-63C5-GWMX

creationtimestamp| type| source ---|---|--- 2026-06-12 16:00:32+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mo44dsnzdc2y...

CVE-2026-9641

creationtimestamp| type| source ---|---|--- 2026-06-12 15:53:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo43x72deo2v 2026-06-12 18:39:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4f7m6z7522 2026-06-14 10:48:56+00:00| seen|...

GHSA-6964-PP88-6WP9 Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step

Summary The executeQuery automation step in Budibase accepts a queryId from automation step inputs and passes it directly to the query execution controller without additional validation. When combined with a REST datasource configured to target internal infrastructure, this creates a server-side...

CVE-2026-44206 Frappe: DB Schema Enumeration via Frappe-Authorization-Source

Frappe is a full-stack web application framework. Prior to versions 15.107.2 and 16.17.4, DB Schema Enumeration is possible through exploiting an endpoint. This issue has been patched in versions 15.107.2 and 16.17.4...

CVE-2026-44206

Frappe (full-stack web application framework) contains CVE-2026-44206, where DB Schema Enumeration is possible via a vulnerable endpoint prior to versions 15.107.2 and 16.17.4. The issue has been patched in those versions. The CVSS 4.0 base score is 6.9 (MEDIUM) with network attack vector, low co...

sbom-risk-analyzer

SBOM-Risk-Analyzer Exploitability-weighted vulnerability pri...

CVE-2026-49993

Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from versions 3.15.4 to before 3.21.7 and 4.0.0 to before 4.4.7, there is an incomplete fix for GHSA-6m52-m754-pw2g. Source code may still be stolen during dev when using the webpack /...

CVE-2026-45670

Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder versions 3.15.4 to before 3.21.6, and 4.0.0-alpha.1 to before 4.4.6, there is an incomplete fix for GHSA-4gf7-ff8x-hq99. Source code may be stolen during dev when using the webpack /...

EUVD-2026-36447

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.4...

CVE-2017-20240

creationtimestamp| type| source ---|---|--- 2026-06-12 14:15:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3whv6i542r...

CVE-2026-47196

creationtimestamp| type| source ---|---|--- 2026-06-12 13:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3vgwapyy23...

CVE-2026-47195

creationtimestamp| type| source ---|---|--- 2026-06-12 13:52:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3v5xts342j...