MINI-VM5C-P9Q4-5M8R

Bulletin has no description...

CVE-2026-15395

creationtimestamp| type| source ---|---|--- 2026-07-17 12:12:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqtpwagzup2v 2026-07-17 12:12:46+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116935253395484489...

CVE-2026-15094

creationtimestamp| type| source ---|---|--- 2026-07-17 11:49:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtonqazmg2d 2026-07-21 06:00:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15094.yaml 2026-07-22...

EUVD-2026-45149

The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from...

ECHO-0E8E-B96F-3BFA

Bulletin has no description...

PT-2026-60804

Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...

PT-2026-60791

TheHive through 4.1.24 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by sending a GET request to the /api/status endpoint, which lacks authentication enforcement in the StatusCtrl.scala handler...

RabbitMQ 3.13.x < 3.13.14 / 4.0.x < 4.0.19 / 4.1.x < 4.1.10 / 4.2.x < 4.2.5 Multiple Vulnerabilities

The version of RabbitMQ installed on the remote host is affected by multiple vulnerabilities: - The rabbitmqmanagement HTTP API accepts oversized valid JSON bodies on withdecode and directrequest paths because readcompletebody checks the accumulated size before the final chunk but not the final...

CVE-2026-59117

creationtimestamp| type| source ---|---|--- 2026-07-16 22:41:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116932062306628938 2026-07-16 23:50:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsghjt65l2u 2026-07-17 14:00:11+00:00| seen|...

GHSA-JPW9-PFVF-9F58

creationtimestamp| type| source ---|---|--- 2026-07-16 20:31:08+00:00| seen| https://gist.github.com/alon710/1d517629bc176ae6cad3ee2369704fcb...

MINI-M7JR-WXQ6-2C3H

Bulletin has no description...

CVE-2026-53366

creationtimestamp| type| source ---|---|--- 2026-07-16 07:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqgthqbh2s 2026-07-16 17:31:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930842680877521 2026-07-20 17:28:37+00:00| seen|...

CVE-2026-45535

creationtimestamp| type| source ---|---|--- 2026-07-16 00:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxlpghmb22...

Linux Distros Unpatched Vulnerability : CVE-2026-56136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-42616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in cat in cat.c that allows an attacker to corrupt heap...

Linux Distros Unpatched Vulnerability : CVE-2026-62320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - netatalk - None Ubuntu Linux - Unknown description CVE-2026-62320 Note that Nessus relies on the presence of the package as reported by the vendo...

CVE-2026-58555

creationtimestamp| type| source ---|---|--- 2026-07-15 23:55:53+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926693544662612...

CVE-2026-47999

creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524...

CVE-2026-15746

creationtimestamp| type| source ---|---|--- 2026-07-15 20:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpls3eges2s...

CVE-2026-45417 DataEase: SQL injection vulnerability

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...