CVE-2026-1913

creationtimestamp| type| source ---|---|--- 2026-04-22 13:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3laa6wof2r 2026-04-24 15:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkatxnvegv2q...

CVE-2026-6396

creationtimestamp| type| source ---|---|--- 2026-04-22 12:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3kfevktc2h 2026-04-25 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdhrt47wy24...

CVE-2026-35247

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwxg6zh2c...

CVE-2026-1660

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-5816

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-22 18:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk44cuqcde2c 2026-04-22 19:00:19+00:00| seen|...

CVE-2026-6845

creationtimestamp| type| source ---|---|--- 2026-04-22 12:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jthzu5h2e 2026-07-03 17:50:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr4c6aoer2f...

CVE-2026-6294

creationtimestamp| type| source ---|---|--- 2026-04-22 12:40:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jf3ktum2k 2026-04-25 11:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcwzfwzdo2l...

CVE-2026-33256

creationtimestamp| type| source ---|---|--- 2026-04-22 12:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3iespefk2k 2026-04-27 06:39:30+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mkhhkb2n4saf...

CVE-2026-33260

creationtimestamp| type| source ---|---|--- 2026-04-22 12:13:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3hvqcf4a2c...

EUVD-2026-24672

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...

CVE-2026-40448

creationtimestamp| type| source ---|---|--- 2026-04-22 09:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk362sawcr2k...

CVE-2026-4131

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...

CVE-2026-6842

creationtimestamp| type| source ---|---|--- 2026-04-22 08:38:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33tv5nbq2q 2026-06-08 09:52:07+00:00| seen| https://bsky.app/profile/bob.mastodon.me.uk.ap.brid.gy/post/3mnrfv6yvmhg2...

CVE-2026-4131 WP Responsive Popup + Optin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpo_image_url' Parameter

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...

CVE-2026-4131

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...

CVE-2026-4131 WP Responsive Popup + Optin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpo_image_url' Parameter

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...

python: Python: Command-line option injection in webbrowser.open() via crafted URLs

A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.19 security and extras update

Red Hat OpenShift Container Platform release 4.20.19 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

GHSA-4VRC-J85C-598C Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules

Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass. This issue affects Spring Security: from...

EUVD-2026-24612

Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from...