[NEW] [medium] IBM DB2: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM DB2 to carry out a Denial of Service attack and execute arbitrary program code.
Advisories tracked
20,902
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,782
Sources online
24
Last sync
14M AGO
[NEW] [high] Grafana: Vulnerability allows file manipulation
A remote, authenticated attacker can exploit a vulnerability in Grafana to manipulate files.
[NEW] [high] FreeRDP: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in FreeRDP to execute arbitrary program code.
[NEW] [high] IBM Langflow Desktop OSS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM Langflow Desktop OSS to gain administrative privileges, execute arbitrary code, bypass security measures, manipulate and disclose data, or cause a Denial-of-Service condition.
[UPDATE] [high] IBM Semeru Runtime: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in IBM Semeru, as used in the Power Hardware Management Console and IBM DB2, to execute arbitrary program code.
[UPDATE] [medium] Oracle Java SE: Multiple Vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
[NEW] [medium] HCL BigFix: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in HCL BigFix to carry out a denial of service attack.
[UPDATE] [high] Grafana: Multiple vulnerabilities
A remote, authenticated or anonymous attacker can exploit multiple vulnerabilities in Grafana to carry out a denial of service attack, execute code, or disclose information.
[NEW] [UNPATCHED] [medium] Keycloak: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Keycloak to bypass security measures, manipulate data, and disclose confidential information.
[NEW] [medium] ProFTPD: Vulnerability allows denial of service
A remote, authenticated attacker can exploit a vulnerability in ProFTPD to carry out a denial of service attack.
[UPDATE] [high] Ruby and Ruby on Rails (erb gem): Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Ruby and Ruby on Rails to bypass security measures and execute arbitrary code.
[UPDATE] [high] Composer: Multiple vulnerabilities allow code execution
An attacker can exploit multiple vulnerabilities in Composer to execute arbitrary program code.
[UPDATE] [high] Dell PowerProtect Data Domain OS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Dell PowerProtect Data Domain OS to execute arbitrary code – even with root privileges – to gain elevated rights – including administrative rights – to bypass security measures, manipulate data, disclose confidential information…
[NEW] [medium] Microsoft Edge: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in Microsoft Edge to bypass security measures and manipulate or disclose confidential information.
[UPDATE] [high] QT: Vulnerability allows code execution
A local attacker can exploit a vulnerability in QT to execute arbitrary program code.
[NEW] [medium] IBM i: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in IBM i to bypass security measures.
[UPDATE] [low] QT: Vulnerability allows bypassing security measures
A local attacker can exploit a vulnerability in QT to bypass security measures.
[NEW] [medium] Microsoft Windows: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft Windows Backup Service, Microsoft Windows Admin Center, and Microsoft Windows Remote Desktop Web Client to disclose information and gain elevated privileges.
[NEW] [medium] Grafana: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Grafana to conduct a denial of service attack or perform cross-site scripting attacks.
[UPDATE] [medium] nghttp2: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in nghttp2 to carry out a denial of service attack.
[NEW] [medium] Composer: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Composer to bypass security mechanisms, write arbitrary files, or disclose information. Certain configurations may be required for successful exploitation.
[NEW] [high] Red Hat Enterprise Linux (perl-HTTP-Daemon): Vulnerability allows execution of arbitrary program code with service privileges
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to execute arbitrary program code with the privileges of the service.
[UPDATE] [medium] Red Hat Enterprise Linux (rrdcached): Vulnerability allows code execution and DoS
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux to cause a denial-of-service attack or potentially execute arbitrary code.
[UPDATE] [medium] Oracle Java SE: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
[UPDATE] [medium] Ruby: Vulnerability Allows Information Disclosure
A remote attacker can exploit a vulnerability in Ruby to disclose information.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a Denial of Service attack or achieve unspecified effects.
[UPDATE] [medium] Adobe Acrobat and Adobe Acrobat Reader: Multiple Vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader to execute arbitrary code, disclose sensitive information, or cause a denial-of-service.
[UPDATE] [medium] Red Hat Enterprise Linux (libyang): Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a Denial of Service attack or potentially execute arbitrary code.
[UPDATE] [medium] Drupal Extensions: Multiple vulnerabilities
A remote attacker can exploit multiple vulnerabilities in various Drupal extensions to manipulate or disclose data, as well as to conduct cross-site scripting attacks.
[NEW] [medium] cyrus imap: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in cyrus imap to bypass security measures and disclose or manipulate data.
[NEW] [medium] IBM Cognos Analytics: Vulnerability allows file manipulation
A remote, authenticated attacker can exploit a vulnerability in IBM Cognos Analytics to manipulate files.
[NEW] [medium] HTTP/2 Server: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in various HTTP/2 server implementations such as the Apache Traffic Server to conduct a Denial of Service attack.
WordPress Multiple Vulnerabilities
Microsoft Edge Multiple Vulnerabilities
Multiple vulnerabilities in Mattermost Server (July 20, 2026)
Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause an unspecified security issue by the vendor.
Multiple vulnerabilities in Microsoft Edge (July 20, 2026)
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause data integrity issues and an unspecified security issue by the vendor.
Multiple vulnerabilities in WordPress (July 20, 2026)
Multiple vulnerabilities have been discovered in WordPress. They allow an attacker to cause remote arbitrary code execution, SQL injection (SQLi), and security policy bypass. CERT-FR is aware of a public proof of concept.
Multiple vulnerabilities in WordPress (July 20, 2026)
On July 17, 2026, WordPress released a patch for two vulnerabilities: CVE-2026-60137: a SQL injection (SQLi); CVE-2026-63030: this allows a security policy bypass. An attacker can exploit these two vulnerabilities, in combination, to gain a...
DSA-6391-1 roundcube - security update
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-site scripting, SSRF bypass, information disclosure or denial of service. https://security-tracker.debian.org/tracker/DSA…
DSA-6392-1 tiff - security update
A flaw was discovered in tiff, a Tag Image File Format library, which may result in denial of service or the execution of arbitrary code if malformed image files are processed. https://security-tracker.debian.org/tracker/DSA-6392-1
NCSC-2026-0250 [1.00] [H/M] Vulnerabilities fixed in WordPress by Automattic
Two vulnerabilities have been fixed in WordPress Core 6.8.6, 6.9.5, and 7.0.2. An unauthenticated malicious actor can exploit the vulnerabilities remotely to execute arbitrary code. This requires sending a malicious HTTP request to the batch API of a WordPress site. Since vulnera…
GHSA-8qqm-fp2q-v734: Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies
Summary A wrong policy can be an open door. You have to check input.attributes.request.http.truncated_body in your policy. Description Incomplete fix for CVE-2026-50197: an oversized declared-Content-Length body still hands OPA an empty parsed_body, so deny-on-presence Rego po…
GHSA-5587-2x54-jj6h: Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication
Description The routesrv component exposes the full cluster route topology (Ingress/RouteGroup configurations, backend URLs, filter chains, OAuth/OIDC callback paths) and cache-cluster topology (Redis/Valkey shard addresses) over plain HTTP with zero authentication. Any pod in t…
GHSA-r95q-fp26-h3hc: CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard
Authenticated full-read SSRF in CloudTAK /api/esri* routes — user-controlled URL fetched with no IP-classification guard Summary Every route in the ESRI helper family (api/routes/esri.ts) takes a fully attacker-controlled URL from the request (POST /api/esri body url, and the p…
GHSA-56r5-2p2f-7cxp: PocketSphinx: Buffer overflows in language and acoustic model loading code
Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stac…
GHSA-pgww-w46g-26qg: AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
Summary The HTML specification requires that a MathML <annotation-xml> element with encoding="text/html" or encoding="application/xhtml+xml" is treated as an HTML integration point. Content inside it must be parsed as HTML, not MathML. AngleSharp does not implement this correctl…
GHSA-mfr4-mq8w-vmg6: PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
<html><head></head><body><h1>Path Traversal in <code>proot-distro copy</code> — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs</h1> <h2>Repository</h2> <p>https://github.com/termux/proot-distro</p> <p><strong>Maintainer:</strong> @sylirre</p> <hr> <…
GHSA-g77h-45rf-hcx4: ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
Summary ExifReader 4.40.0 can throw an uncaught RangeError: Offset is outside the bounds of the DataView while parsing crafted HEIC/AVIF files. The file only needs a valid leading ftyp box with a HEIC/AVIF major brand followed by a malformed ISO-BMFF box, such as an empty 8-byte…
GHSA-937x-gpqr-72gg: Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
1. Header | Field | Value | |---|---| | Title | Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641) | | Project | Flask-Reuploaded (flask_uploads) | | Affected | <= 1.5.0 (latest release; commit ae31c3f91da40b465c…
GHSA-c4gh-rv8h-q9vw: Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
Summary The TypeScript Prompty loader used gray-matter without overriding executable frontmatter engines. gray-matter supports JavaScript frontmatter blocks such as ---js and evaluates them while parsing. An attacker-controlled .prompty file could therefore execute arbitrary Java…