24320 matches found
CVE-2026-21053
creationtimestamp| type| source ---|---|--- 2026-07-10 08:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbppenf3t2x 2026-07-10 09:55:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbuznayhf2y 2026-07-10 16:47:32+00:00| seen|...
MINI-V968-QRXH-HWJQ
Bulletin has no description...
CVE-2026-15282
creationtimestamp| type| source ---|---|--- 2026-07-10 05:16:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqbffamohv2z 2026-07-11 00:00:32+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqde7qogx42j 2026-07-13 01:01:18+00:00| seen|...
GHSA-MJQX-C6F6-7RC2
creationtimestamp| type| source ---|---|--- 2026-07-10 03:41:59+00:00| seen| https://gist.github.com/alon710/bc442ee88dc103da228f4212da5b648e...
GHSA-MC85-72GR-VM9F
creationtimestamp| type| source ---|---|--- 2026-07-10 02:12:08+00:00| seen| https://gist.github.com/alon710/771904cdd1d35750b64c7a038f4ce112...
MINI-G95V-G5Q7-P524
Bulletin has no description...
CVE-2026-59858
creationtimestamp| type| source ---|---|--- 2026-07-10 00:40:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqavxyae4f2l 2026-07-10 19:54:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwikfmx22a 2026-07-11 01:45:18+00:00| seen|...
PT-2026-57298
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq federation management plugin renders the consumer tag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...
GHSA-G9XF-7F8Q-9MCJ
creationtimestamp| type| source ---|---|--- 2026-07-09 21:41:51+00:00| seen| https://gist.github.com/alon710/29f907693324d6187f6b141f2c73d47b...
MINI-R2HV-H3C3-FP7X
Bulletin has no description...
WordPress KiviCare – Clinic & Patient Management System (EHR) plugin <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation vulnerability
Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation vulnerability discovered by Niv Kochan in WordPress Plugin KiviCare versions = 4.4.0...
GHSA-339V-266X-79XR nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate
Summary Two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate issuance time — only at poll time. 1. Blocklist not enforced at sign / re-enroll time...
CVE-2026-58459
creationtimestamp| type| source ---|---|--- 2026-07-09 19:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqadagsstr26 2026-07-13 18:29:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkd43obcc2x 2026-07-14 21:37:07+00:00| seen|...
CGA-FM26-M6Q9-7QVH
Bulletin has no description...
CVE-2026-56774
creationtimestamp| type| source ---|---|--- 2026-07-09 16:50:09+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqa3pfiovd2y...
CVE-2026-42765
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
CVE-2026-12270
The CVE concerns Everest Forms for WordPress prior to version 3.5.0. The vulnerability arises because access controls on several onboarding-assistant REST API endpoints are bypassable: the capability check only runs when a specific attacker‑controlled request header has a value, allowing unauthen...
EUVD-2026-42511
The Everest Forms WordPress plugin before 3.5.0 does not correctly restrict access to several REST API endpoints belonging to its onboarding assistant: the capability check is only applied when an attacker-controllable request header holds a specific value, so it can be bypassed by omitting or...
CVE-2026-12270 Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints
The Everest Forms WordPress plugin before 3.5.0 does not correctly restrict access to several REST API endpoints belonging to its onboarding assistant: the capability check is only applied when an attacker-controllable request header holds a specific value, so it can be bypassed by omitting or...