CVE ID :CVE-2026-58455 Published : July 2, 2026, 3:12 p.m. | 2 hours, 33 minutes ago Description :Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after

Learn MoreCVE-2026-58455 – Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php

CVE ID :CVE-2026-44941 Published : July 2, 2026, 3:19 p.m. | 2 hours, 26 minutes ago Description :A relative path traversal in the “keyhint” option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious

Learn MoreCVE-2026-44941 – libzypp path traversal via “keyhint” in repomd.xml

CVE ID :CVE-2026-44935 Published : July 2, 2026, 4 p.m. | 1 hour, 45 minutes ago Description :Missing validation of “valuesFrom” references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15

Learn MoreCVE-2026-44935 – Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

CVE ID :CVE-2026-55952 Published : July 2, 2026, 4:06 p.m. | 1 hour, 39 minutes ago Description :The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have

Learn MoreCVE-2026-55952 – TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

CVE ID :CVE-2026-55950 Published : July 2, 2026, 4:06 p.m. | 1 hour, 38 minutes ago Description :Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener.

Learn MoreCVE-2026-55950 – DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

CVE ID :CVE-2024-14037 Published : July 2, 2026, 5:03 p.m. | 41 minutes ago Description :Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet

Learn MoreCVE-2024-14037 – Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob

CVE ID :CVE-2022-50973 Published : July 2, 2026, 5:04 p.m. | 41 minutes ago Description :Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST

Learn MoreCVE-2022-50973 – Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload Servlet

CVE ID :CVE-2024-58352 Published : July 2, 2026, 5:05 p.m. | 40 minutes ago Description :Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid

Learn MoreCVE-2024-58352 – Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do

CVE ID :CVE-2026-9272 Published : July 2, 2026, 2:02 p.m. | 3 hours, 42 minutes ago Description :In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the

Learn MoreCVE-2026-9272 – Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS

CVE ID :CVE-2026-8079 Published : July 2, 2026, 2:03 p.m. | 3 hours, 41 minutes ago Description :In Progress Flowmon versions prior to 12.5.9 and 13.0.10, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation

Learn MoreCVE-2026-8079 – Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon