CVE-2026-63771

creationtimestamp| type| source ---|---|--- 2026-07-21 09:10:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr5hm4swxy2o...

CVE-2026-9341

creationtimestamp| type| source ---|---|--- 2026-07-21 08:49:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5ggei2pt2r...

CVE-2026-15691

creationtimestamp| type| source ---|---|--- 2026-07-21 08:48:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5geceirq2p...

GHSA-9HW9-CH79-4VH6

creationtimestamp| type| source ---|---|--- 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...

CVE-2023-37508

creationtimestamp| type| source ---|---|--- 2026-07-21 06:17:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr55wd6qbu27...

CVE-2026-15156

creationtimestamp| type| source ---|---|--- 2026-07-21 05:53:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54n2liks2q...

CVE-2026-15927 Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation

A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...

CVE-2026-57852

creationtimestamp| type| source ---|---|--- 2026-07-21 03:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4vqc72kz2e...

CVE-2026-63728

creationtimestamp| type| source ---|---|--- 2026-07-21 02:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4scbfod72b...

CVE-2026-16327

creationtimestamp| type| source ---|---|--- 2026-07-21 02:43:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4rzcvi4x2x...

CVE-2026-48349

creationtimestamp| type| source ---|---|--- 2026-07-21 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr4kwieey42l...

GHSA-H95V-H523-3MW8

creationtimestamp| type| source ---|---|--- 2026-07-21 00:31:29+00:00| seen| https://gist.github.com/alon710/07f073f92ce20c0890f37523b73f7af8...

The vulnerability of the URL processor for web interfaces in the microprogramming software for D-Link DNS-320 network storage devices allows a perpetrator to cause a service failure.

The vulnerability of the URL processor in the web interface of the D-Link DNS-320 network storage microprogramming system is related to errors in access control when processing the File parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2026-63290

Name of the Vulnerable Software and Affected Versions Gitea version 1.26.2 Description The software contains two Server-Side Request Forgery SSRF issues. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location, potentially accessing...

PT-2026-63307

Name of the Vulnerable Software and Affected Versions Gitea versions 1.26.4 and earlier Description The restore-repo CLI command fails to properly validate the Head.CloneURL field when parsing pull request.yml from a repository dump. The safety check function CheckAndEnsureSafePR is called with a...

Oracle Linux 10 : python3.12 (ELSA-2026-39183)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39183 advisory. 3.12.13-2.0.1.el102.1 - Remove upstream URL reference 3.12.13-2.1 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 Tenable has extracted the preceding...

CVE-2026-47048: URL Redirection to Untrusted Site

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-47045: URL Redirection to Untrusted Site

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successf...

PT-2026-63275

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A blind Server-Side Request Forgery SSRF exists when the oauth2 client UPDATE AVATAR = true setting is enabled. The issue occurs because the server fetches the avatar URL provided by an...

CVE-2026-61254: URL Redirection to Untrusted Site

Vulnerability in the Oracle HRMS Republic of Korea product of Oracle E-Business Suite component: Korean Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS Republi...