42571 matches found
CVE-2026-13890
An out of bounds read flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500601345...
CVE-2026-14404
An inappropriate implementation flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513337989...
GeoServer Demo Request Endpoint - Server Side Request Forgery
It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...
CVE-2026-64355
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
EUVD-2026-48434
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)
Last week, there were 75 vulnerabilities disclosed in WordPress Core, 68 WordPress Plugins and no WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 50 Vulnerability Researchers that contributed to WordPress Security last week. Review those...
CVE-2026-13181
creationtimestamp| type| source ---|---|--- 2026-07-22 16:32:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g 2026-07-22 17:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b...
CVE-2026-16364
creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqnhcmd52k...
CVE-2026-60678
The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...
CVE-2026-60499
CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...
CVE-2026-60458
...
CVE-2026-60327
...
CVE-2026-60323
CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...
CVE-2026-60287
...
CVE-2026-60265
CVE-2026-60265 affects the Oracle Coherence component (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0 . The vulnerability allows a high-privilege attacker with local logon to compromise Oracle Coherence, with potential broader...
CVE-2026-47057
...
CVE-2026-47047
CVE-2026-47047 affects Oracle VM VirtualBox Core in version 7.2.12. Local, low-privilege attacker with logon can compromise and take over VirtualBox (CVSS 3.1 base 7.8). Exploitation status and specific remediation are not provided in the included documents; refer to the Oracle July 2026 CPU advi...
CVE-2026-46981
...
CVE-2026-1771
creationtimestamp| type| source ---|---|--- 2026-07-21 10:53:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5nfg3ns62b 2026-07-21 14:14:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr5ylsgfxk2o...