122418 matches found
CVE-2024-35585
Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...
EUVD-2024-55746
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
CVE-2024-35585: Missing Authentication for Critical Function
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
PT-2026-84757
Name of the Vulnerable Software and Affected Versions Grafana versions prior to 12.4.10-1.1 Description An authenticated user with permissions to query a SQL data source can cause a denial of service by injecting the timeGroup macro through a WHERE clause. Because the regex-based macro parsing do...
CVE-2026-19475: Uncontrolled Resource Consumption
An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...
SQL Data Source Plugin: OOM DoS via $__timeGroup macro
An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...
PT-2026-84735
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2024-35585
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
CVE-2026-84482
creationtimestamp| type| source ---|---|--- 2026-09-01 23:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dkpruwnoj7oab...
CVE-2026-84208
creationtimestamp| type| source ---|---|--- 2026-09-01 22:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bhpcnouscr4ff 2026-09-02 04:12:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muj2yoou662x...
APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)
Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...
CVE-2026-73749
creationtimestamp| type| source ---|---|--- 2026-09-01 22:07:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muigmtjksk2w 2026-09-02 13:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muk26cfgl72y 2026-09-03 01:58:25+00:00| seen|...
CVE-2026-19766
creationtimestamp| type| source ---|---|--- 2026-09-01 22:07:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muiglyplmh25 2026-09-01 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muik4glrds2y 2026-09-05 03:07:07+00:00| seen|...
super clearfog-v1.2.6
📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...
CVE-2026-84470
creationtimestamp| type| source ---|---|--- 2026-09-01 21:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fzprk45m7clv5...
CVE-2026-84370
creationtimestamp| type| source ---|---|--- 2026-09-01 21:29:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a6zdr2p3ak4i6 2026-09-01 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muigafg7a724...
CVE-2026-73524
creationtimestamp| type| source ---|---|--- 2026-09-01 21:23:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/74mwvbb642hqi...
DEBIAN-CVE-2026-84361
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...
CVE-2026-84361
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...
bunkerweb v1.6.15-rc1
🌐 Website | 🤝 Panel | 📓 Documentation | 👨💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples 💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback 🛡️ Make security by default great again! BunkerWeb Bun...