CVE-2026-47633

creationtimestamp| type| source ---|---|--- 2026-06-19 06:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775245576207551 2026-06-19 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momo3nowoe2c...

GHSA-8MG9-J9CF-54CJ

creationtimestamp| type| source ---|---|--- 2026-06-19 04:41:13+00:00| seen| https://gist.github.com/alon710/e083ed26c473e5302badc99cce623436 2026-06-19 05:02:08+00:00| seen| https://gist.github.com/alon710/21958fb84fc5c64da7368e4899e2b6cf...

CVE-2026-53852

creationtimestamp| type| source ---|---|--- 2026-06-19 04:41:13+00:00| seen| https://gist.github.com/alon710/e083ed26c473e5302badc99cce623436 2026-06-19 05:02:08+00:00| seen| https://gist.github.com/alon710/21958fb84fc5c64da7368e4899e2b6cf...

CVE-2026-32174

creationtimestamp| type| source ---|---|--- 2026-06-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momj2bqrjp26 2026-06-19 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774890711719017...

CVE-2026-12044

creationtimestamp| type| source ---|---|--- 2026-06-19 03:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momgy6vhd72r 2026-06-19 05:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkr5ol5y2u 2026-08-02 08:00:28+00:00| seen|...

CVE-2026-12048

creationtimestamp| type| source ---|---|--- 2026-06-19 03:43:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momggbyg3x2y 2026-06-19 05:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkqp24jg2f 2026-06-22 11:31:44+00:00| seen|...

CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

CVE-2026-56131

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

SUSE CVE-2026-8356

LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose...

SUSE CVE-2026-42055

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and the...

PT-2026-50882

Name of the Vulnerable Software and Affected Versions FlexNet Manager Suite 2025 R1 FlexNet Manager Suite 2025 R2 Description Insufficient access control in the software could allow unauthorized access to attachment files. Recommendations At the moment, there is no information about a newer versi...

PT-2026-50890

Name of the Vulnerable Software and Affected Versions NI grpc-device versions prior to 2.17.0 Description A NULL pointer dereference occurs in the data moniker service of NI grpc-device. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that i...

PT-2026-51039

Name of the Vulnerable Software and Affected Versions Cap-go versions prior to 12.128.2 Description An authentication logic flaw allows an attacker to register and control an account linked to a victim's email address before the email is verified. By enabling two-factor authentication on this...

PT-2026-51002

Name of the Vulnerable Software and Affected Versions PhpWeasyPrint versions prior to 2.6.0 Description PhpWeasyPrint is a PHP library used for generating PDFs from HTML pages or URLs. The library fetches content of option values server-side using the file get contents function when a value is...

redis:6 security update

6.2.22-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.22-1 - rebase to 6.2.22 for CVE-2026-25243...

Oj - Integer Overflow in Oj.load 2GB String Handling

Summary Oj.load is vulnerable to heap corruption when parsing a JSON string longer than 2 GB. An integer overflow in bufappendstring buf.h:61 converts the string length to a large negative sizet, causing memcpy to copy an astronomically large amount of data out of bounds. This crashes the process...

lemon-3.53.2-2.1 on GA media (moderate)

lemon-3.53.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11059-1 Rating: moderate Cross-References: CVE-2026-11822 CVE-2026-11824 CVSS scores: CVE-2026-11822 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-11824 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...

PT-2026-50992

Name of the Vulnerable Software and Affected Versions Joomla! Component vAccount version 2.0.2 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending GET requests to the 'vaccount-dashboard/expense'...