EUVD-2026-3023

EUVD-2026-3023...

EUVD-2026-3021

EUVD-2026-3021...

EUVD-2026-3015

EUVD-2026-3015...

EUVD-2026-3037

EUVD-2026-3037...

EUVD-2026-3009

EUVD-2026-3009...

EUVD-2026-2988

The vulnerability, if exploited, could allow an authenticated miscreant Process Optimization Standard User to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server...

CVE-2025-61937

CVE-2025-61937 affects AVEVA Process Optimization. The flaw allows unauthenticated remote code execution via the taoimr service, potentially fully compromising the model application server. CVSS metrics in the documents show CRITICAL impact. Remediation details or fixed versions are not provided ...

CVE-2021-47760

creationtimestamp| type| source ---|---|--- 2026-01-15 17:50:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci5hueuqu2y...

GhostPoster Browser Malware Hid for 5 Years With 840,000 Installs

Researchers uncover a 5-year malware campaign using browser extensions on Chrome, Firefox and Edge, relying on hidden payloads and shared infrastructure...

CVE-2025-67079

creationtimestamp| type| source ---|---|--- 2026-01-15 16:50:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci25m6y7u2u 2026-01-15 18:17:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci6yhw23v2x...

CVE-2021-47760

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate...

DEBIAN-CVE-2026-0989

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may...

EUVD-2026-2806

A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...

CVE-2026-23578

creationtimestamp| type| source ---|---|--- 2026-01-15 08:04:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mch4r5prqr2c...

EUVD-2026-2834

Not used...

BELL-CVE-2025-71091

Bulletin has no description...

BELL-CVE-2025-71099

Bulletin has no description...

BELL-CVE-2025-68819

Bulletin has no description...

CVE-2025-68782

A NULL pointer dereference flaw was found in the Linux kernel's SCSI target subsystem. When memory allocation for the command descriptor block CDB buffer fails, the ttaskcdb pointer remains NULL but is subsequently dereferenced in the error handling path, potentially causing a kernel crash...

CVE-2025-71131

A use-after-free vulnerability was found in the Linux kernel's seqiv Sequence IV crypto module. After calling cryptoaeadencrypt, the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req-iv to compare against info, accessing potentially...