#
20 entries
2026-08-02
ID: 692
CVE-2026-66338 - Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()
2026-08-02
ID: 690
CVE-2026-55985 - Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
2026-08-02
ID: 689
CVE-2026-61884 - Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Path or Channel
2026-08-02
ID: 679
CVE-2026-48032 - Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providers
2026-08-02
ID: 678
CVE-2026-48033 - Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name
2026-08-02
ID: 677
CVE-2026-48034 - HULUMI-H5 bypass via decoy sibling resources targeting a different bucket
2026-08-02
ID: 669
CVE-2026-65623 - Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit
2026-08-02
ID: 668
CVE-2026-65707 - Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint
2026-08-01
ID: 635
CVE-2026-65693 - Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates
2026-08-01
ID: 619
CVE-2026-15810 - Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover
2026-08-01
ID: 614
CVE-2026-15401 - VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter
2026-08-01
ID: 613
CVE-2026-15663 - Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key
2026-07-31
ID: 609
CVE-2026-15346 - VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter
2026-07-31
ID: 608
CVE-2026-15704 - CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components
2026-07-31
ID: 607
CVE-2026-15739 - Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute