CVE-2026-1617

creationtimestamp| type| source ---|---|--- 2026-07-21 11:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5puffh442v 2026-07-21 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr5r4jbqma2l 2026-07-21 13:21:30+00:00| seen|...

GHSA-FJ7V-R99M-22GQ

creationtimestamp| type| source ---|---|--- 2026-07-21 11:31:12+00:00| seen| https://gist.github.com/alon710/48f3deb1ca1eafb4018fbe6276da18c1...

GHSA-6R8X-57C9-28J4

creationtimestamp| type| source ---|---|--- 2026-07-21 10:31:21+00:00| seen| https://gist.github.com/alon710/8369d28698d5eaa2f4badffaca60e4b4...

GHSA-JJJ6-MW9F-P565

creationtimestamp| type| source ---|---|--- 2026-07-21 09:31:09+00:00| seen| https://gist.github.com/alon710/58614afe66c43fc333bb604ba1de657d...

ROOT-APP-MAVEN-CVE-2021-46877 CVE-2021-46877 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2021-46877 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2026-15812

creationtimestamp| type| source ---|---|--- 2026-07-21 05:57:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116956427872567771 2026-07-21 10:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5n4hn4dy2o...

PT-2026-63259

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...

PT-2026-63303

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...

GHSA-G446-98W2-8P5W

creationtimestamp| type| source ---|---|--- 2026-07-20 22:31:01+00:00| seen| https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771...

CVE-2026-53594

creationtimestamp| type| source ---|---|--- 2026-07-20 22:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cjglmhe2s...

GHSA-3JXR-9VMJ-R5CP

creationtimestamp| type| source ---|---|--- 2026-07-20 21:31:31+00:00| seen| https://gist.github.com/alon710/8cb13493a0f92ed662f2d6291bd0d794...

CVE-2026-44584

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-44584

Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...

CVE-2026-44584 Paymenter doesn't reset email verification status after email change

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-36669

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k...

CVE-2026-16277

creationtimestamp| type| source ---|---|--- 2026-07-20 19:16:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116953907325387577 2026-07-23 22:33:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24...

GHSA-PR2V-JX2C-WG9F Tornado vulnerable to Header Injection and XSS via reason argument

Header injection and XSS via reason argument Summary The reason argument used by both RequestHandler.setstatus and tornado.web.HTTPError is designed to allow applications to pass custom "reason" phrases the "Not Found" in HTTP/1.1 404 Not Found to the HTTP status line mainly for non-standard stat...

CVE-2026-12972

creationtimestamp| type| source ---|---|--- 2026-07-20 08:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2t7xjkpw2s...

CVE-2026-64123

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking component. When HSR node-list and node-status operations are performed, a generic-netlink reader might retain a pointer to a freed node table. This can lead to a use-after-free vulnerability, potentially...

CVE-2026-12973 PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification

The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to disclose the secret order key of arbitrary WooCommerce orders and, under some configurations, to...