EUVD-2026-46811

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

EUVD-2026-46735

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Patchset Assistant. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Dat...

Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`

Summary CVE-2026-20800 fixed private-info leakage to revoked users only for the notification endpoint. Two sibling endpoints that return data keyed on the caller's own relationship still do not re-check repo access at output time: - GET /api/v1/user/starred — getStarredRepos computes a per-repo...

GHSA-QF2F-QH6P-7V89 Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`

Summary CVE-2026-20800 fixed private-info leakage to revoked users only for the notification endpoint. Two sibling endpoints that return data keyed on the caller's own relationship still do not re-check repo access at output time: - GET /api/v1/user/starred — getStarredRepos computes a per-repo...

PT-2026-63316

Summary CVE-2026-20800 fixed private-info leakage to revoked users only for the notification endpoint. Two sibling endpoints that return data keyed on the caller's own relationship still do not re-check repo access at output time: - GET /api/v1/user/starred — getStarredRepos computes a per-repo...

CVE-2026-11961

creationtimestamp| type| source ---|---|--- 2026-07-17 08:27:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtdeg53a32x 2026-07-17 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116934497361624112 2026-07-17 09:00:32+00:00| seen|...

CVE-2026-57831

creationtimestamp| type| source ---|---|--- 2026-07-15 13:10:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqos7umhar22 2026-07-15 13:22:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqosupkfli22...

CVE-2026-58065

creationtimestamp| type| source ---|---|--- 2026-07-13 17:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkatd3dmc2x 2026-07-13 18:15:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcd6u55r2f 2026-07-13 22:10:25+00:00| seen|...

CVE-2026-21049

creationtimestamp| type| source ---|---|--- 2026-07-10 08:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbqdrqv5w2i 2026-07-10 09:37:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtywpqfv2z 2026-07-10 12:46:57+00:00| seen|...

CVE-2026-59221

Open WebUI before 0.10.0 is affected by a path traversal guard bypass in sanitize_proxy_path (backend/open_webui/routers/terminals.py). The function decodes proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal to bypass normalization and be decoded by the upstream ter...

CVE-2026-14069

creationtimestamp| type| source ---|---|--- 2026-07-02 03:41:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4exh5l626 2026-07-02 03:41:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn4ez54yr2s 2026-07-02 07:51:21+00:00| seen|...

CVE-2026-10096

creationtimestamp| type| source ---|---|--- 2026-07-01 09:17:36+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6orrwm62u 2026-07-01 09:17:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6or2tpi2l 2026-07-01 11:36:19+00:00| seen|...

CVE-2026-12732

creationtimestamp| type| source ---|---|--- 2026-07-01 09:15:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6l7fscm2q 2026-07-01 09:15:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6l7vt242g 2026-07-01 11:44:12+00:00| seen|...

SUSE-SU-2026:2695-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: - CVE-2026-48618: tls: normalize hostname for server identity checks bsc1268593. - CVE-2026-48933: crypto: guard WebCrypto cipher output length bsc1268592. - CVE-2026-48615: lib,test: redact proxy credentials in tunnel errors bsc1268598. -...

CVE-2026-52784

creationtimestamp| type| source ---|---|--- 2026-06-26 23:13:00+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpa2zyry4n26 2026-06-26 23:23:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3nmpsxo27 2026-06-28 20:00:47+00:00| seen|...

CVE-2026-52940

creationtimestamp| type| source ---|---|--- 2026-06-24 08:38:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116804178176541056 2026-06-24 10:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqbszocp2x...

CVE-2026-47645

creationtimestamp| type| source ---|---|--- 2026-06-19 22:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moof6vfqd62e 2026-06-19 23:03:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moohax4noi2c 2026-06-26 22:04:00+00:00| seen|...

CVE-2026-47633

creationtimestamp| type| source ---|---|--- 2026-06-19 06:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775245576207551 2026-06-19 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momo3nowoe2c...

EUVD-2026-37864

The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.4.01. This is due to insufficient authorization and missing per-calendar ownership checks in the cpabcappointmentscalendarload2 function, which is reachable vi...

CVE-2026-22312

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoyat2ju2a 2026-06-16 21:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogreeehlr2g...