266122 matches found
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)
Last week, there were 91 vulnerabilities disclosed in WordPress Core, 80 WordPress Plugins and no WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 62 Vulnerability Researchers that contributed to WordPress Security last week. Review those...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: infinispan, spark, opensearch, apache-nifi-registry, strimzi-kafka-operator, sonarqube, logstash, tez, apicurio-registry, cass-config-builder, akhq, wildfly, flyway, keycloak-config-cli, dependency-track, apache-nifi, scala, druid, spdx-tools-java, gradle...
Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest
Summary IBM HTTP Server IHS is used by the IBM Rational ClearQuest server and web components. Information about security vulnerabilities affecting IHS have been published in a security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affecte...
Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server and WebSphere Application Server Liberty have been published in a security bulletin...
CVE-2026-61338
creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mry4pcuyk525...
CVE-2026-60426
creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvswy4non2l...
[SECURITY] [DSA 6398-1] webkit2gtk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6398-1 [email protected] https://www.debian.org/security/ Alberto Garcia July 23, 2026 https://www.debian.org/security/faq -...
@12-apps/app-shell (>=1.0.0, <=4.0.0), @12-apps/auth (>=1.2.0, <=1.22.0) +280 more potentially affected by unknown CVE via @auth/core (>=0.0.0-manual.fdbc96ab, <=0.41.2)
@auth/core NPM version =0.0.0-manual.fdbc96ab, =1.0.0, =1.2.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-AUTHCORE-18306842...
DEBIAN-CVE-2026-65914
DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
GHSA-V56Q-MH7H-F735 vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server, rancher-api-ui...
GHSA-XVCM-6775-5M9R vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server, rancher-api-ui...
GHSA-9WJQ-CP2P-HRGF vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
GHSA-CJ75-F6XR-R4G7 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
SUSE-SU-2026:22917-1 Security update for afterburn
This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2022-24713: regex: high complexity when parsing regexes with large repetitions on empty sub-expressions can lead to DoS bsc1196972. - CVE-2024-12224: idna: privilege escalatio...
USN-8597-1 linux-ibm-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
GHSA-CJ75-F6XR-R4G7 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, pghero, pghero-fips, ruby3.2-rails...
CVE-2026-59879 vulnerabilities
Vulnerabilities for packages: authentik-fips, vitess, keep-fips, rancher-api-ui, keep, authentik, nextcloud-server, arangodb...