CVE-2021-47980
Medium Severity Description Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2021-47979
High Severity Description WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated
CVE-2026-8704
Critical Severity Description Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.
CVE-2026-8700
Critical Severity Description Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl’s
DSA-6277-1 openjpeg2 – security update
https://security-tracker.debian.org/tracker/DSA-6277-1
DSA-6276-1 ffmpeg – security update
https://security-tracker.debian.org/tracker/DSA-6276-1
CVE-2026-45619
Medium Severity Description AVideo CVE-2026-43884 incomplete fix – six (or more) `isSSRFSafeURL()` call sites still discard the `$resolvedIP`
CVE-2026-45610
Medium Severity Description AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a
CVE-2026-45580
Medium Severity Description AVideo: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute Read more at https://www.tenable.com/cve/CVE-2026-45580
DSA-6275-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6275-1
DSA-6273-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6273-1
DSA-6274-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6274-1