CVE-2026-33024

creationtimestamp| type| source ---|---|--- 2026-03-20 06:01:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116259978430738520 2026-03-20 06:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhhtpbx2qi2n 2026-03-20 06:04:20+00:00| seen|...

CVE-2026-21992

creationtimestamp| type| source ---|---|--- 2026-03-20 06:01:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116259977375105317 2026-03-20 13:05:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilf4nf2c2s 2026-03-20 13:09:35+00:00| seen|...

CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...

CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...

CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...

CVE-2026-32765

This repository is no longer public...

OneUptime 数据伪造问题漏洞

OneUptime is a comprehensive solution developed by OneUptime OpenSource. It is used to monitor and manage your online services. Versions of OneUptime prior to 10.0.34 contained a data manipulation vulnerability. This vulnerability stemmed from the WhatsApp POST webhook processor not verifying the...

PT-2026-26753

Name of the Vulnerable Software and Affected Versions Vikunja affected versions not specified Description A flaw in the password reset logic allows disabled users to regain access to their accounts. The ResetPassword function sets the user’s status to StatusActive after a successful password rese...

Fixed in Apache Tomcat 9.0.116

Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 95f77782. This issue was reported to the Tomcat security team o...

Linux Distros Unpatched Vulnerability : CVE-2026-4453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium...

PT-2026-26542

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 Description Discourse is an open-source discussion platform. An authorization bypass in the poll plugin allowed authenticat...

Fixed in Apache Tomcat 11.0.20

Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 021d1f83. This issue was reported to the Tomcat security team o...

CVE-2026-1005

creationtimestamp| type| source ---|---|--- 2026-03-19 18:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgmozfhv52n...

CVE-2026-30402

creationtimestamp| type| source ---|---|--- 2026-03-19 17:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgktzze7n2u 2026-03-19 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs4rn6ve2s 2026-03-19 20:19:09+00:00| seen|...

CVE-2026-3511

creationtimestamp| type| source ---|---|--- 2026-03-19 12:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfzziy5xz2u 2026-03-19 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs5dak452s...

EUVD-2026-13065

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserStatus' function in all versions up to, and including, 3.3.49. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2026-27093

creationtimestamp| type| source ---|---|--- 2026-03-19 07:18:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfhjfw5ku2s 2026-03-19 08:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfkwo5lbg2n 2026-03-19 09:37:36+00:00| seen|...

CVE-2024-57999

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-36442

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-68367

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...