122374 matches found
CVE-2026-8862 Vulnerabilities exists in IBM Netezza Software
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...
File Inclusion at postcss Dependency in Bamboo Data Center
This High severity File Inclusion vulnerability was introduced in versions 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated...
CVE-2026-83497
creationtimestamp| type| source ---|---|--- 2026-09-03 20:32:54+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3muncbakmfo25...
CVE-2026-85048
creationtimestamp| type| source ---|---|--- 2026-09-03 20:00:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208884349943959 2026-09-04 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...
CVE-2026-85393
creationtimestamp| type| source ---|---|--- 2026-09-03 19:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/asgrlxcdrvwc5 2026-09-03 20:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munahurifc23 2026-09-05 05:20:02+00:00| seen|...
Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-49356)
Summary There are vulnerabilities in core-7.26.10.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-49356. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc...
CVE-2026-84238
creationtimestamp| type| source ---|---|--- 2026-09-03 18:07:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mun25mnisg2o 2026-09-03 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun4jepumj2w...
EmailXpose — Updated!
EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...
SUSE CVE-2026-19475
An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...
CVE-2022-46032
creationtimestamp| type| source ---|---|--- 2026-09-03 14:43:22+00:00| seen| https://gist.github.com/1731249586/6656c4616664e3bf64e7083926dc0566...
CVE-2026-78080
creationtimestamp| type| source ---|---|--- 2026-09-03 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumjjf4tjf2y 2026-09-03 14:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mummqctp742y...
GHSA-X898-729X-CC3R
creationtimestamp| type| source ---|---|--- 2026-09-03 12:28:54+00:00| seen| https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a...
CVE-2026-41030
creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...
CVE-2026-85150
creationtimestamp| type| source ---|---|--- 2026-09-03 11:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/h4gneqinjiu47...
composer: Composer: Arbitrary code execution via malicious Perforce source URL
A flaw was found in Composer. A malicious dependency package from a custom Composer repository or an untrusted composer.lock file could exploit a vulnerability in how Composer handles Perforce source URLs. By setting source.type to perforce and source.url to an rsh: or jsh: P4PORT value, an...
CVE-2026-76175
creationtimestamp| type| source ---|---|--- 2026-09-03 10:56:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nqbvpo4r4i2g...
CVE-2026-76174
creationtimestamp| type| source ---|---|--- 2026-09-03 10:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j2xudr2x2zzga 2026-09-03 14:07:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mummphzzjj2o 2026-09-03 14:20:03+00:00| seen|...
CVE-2026-15933 Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)
OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...
phantom-frida v17.16.4-20260830-run38.1
phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...