MINI-JP83-8J64-34FQ

Bulletin has no description...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the connected-components when invalid arguments are provided. An attacker can cause the application to enter an infinite loop by supplying specially crafted input. Remediation A fi...

CVE-2026-14003

creationtimestamp| type| source ---|---|--- 2026-07-01 21:18:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgx5prmj26 2026-07-02 04:22:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6n7qcb32u 2026-07-02 07:48:58+00:00| seen|...

CVE-2026-13826

creationtimestamp| type| source ---|---|--- 2026-07-01 19:46:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbtkbi3d2y 2026-07-02 07:20:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

ECHO-C794-855A-314D

Bulletin has no description...

CVE-2026-58036

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php,...

CVE-2026-11380

creationtimestamp| type| source ---|---|--- 2026-07-01 12:47:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkfad56s26 2026-07-01 22:03:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjioyorz2t 2026-07-04 13:15:07+00:00| seen|...

CVE-2026-1239

creationtimestamp| type| source ---|---|--- 2026-07-01 12:11:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplig3lr5o27...

RLSA-2026:30844 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

CVE-2026-10750

creationtimestamp| type| source ---|---|--- 2026-07-01 09:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplapaqefn2u 2026-07-01 12:09:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mplibhzlrp2l 2026-07-02 00:00:23+00:00| seen|...

CGA-6G76-8M93-P27G

Bulletin has no description...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

CVE-2026-13821

creationtimestamp| type| source ---|---|--- 2026-07-01 05:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843094682918653 2026-07-01 19:39:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbgibvhs2y 2026-07-02 01:05:22+00:00| seen|...

CVE-2026-11981

The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3 This is due to missing nonce validation on the givesetnotificationstatushandler function. This makes it possible for unauthenticated attackers to disable donation email notificatio...

CVE-2026-13798

creationtimestamp| type| source ---|---|--- 2026-07-01 05:09:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842990988360734 2026-07-02 07:18:59+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:15:10+00:00| seen|...

CVE-2026-13775

creationtimestamp| type| source ---|---|--- 2026-07-01 04:41:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842882344138390 2026-07-02 01:04:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtmcgi4l2l 2026-07-02 07:18:10+00:00| seen|...

CVE-2026-11981

The CVE-2026-11981 entry concerns the WordPress GiveWP plugin (affected: versions up to 4.15.3) with a Cross-Site Request Forgery vulnerability due to missing nonce validation in give_set_notification_status_handler(). This allows unauthenticated attackers to disable donation email notifications ...

CVE-2026-11981

The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3 This is due to missing nonce validation on the givesetnotificationstatushandler function. This makes it possible for unauthenticated attackers to disable donation email notificatio...

GHSA-M63V-2G9W-2W6V

creationtimestamp| type| source ---|---|--- 2026-07-01 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842484590156234 2026-07-01 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpkjmgapbr23...