123236 matches found
CVE-2026-57650
creationtimestamp| type| source ---|---|--- 2026-07-06 11:15:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpxxlwrxud2m...
CVE-2026-30352
creationtimestamp| type| source ---|---|--- 2026-07-06 11:14:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxxjxrgvz2j...
CVE-2025-65783
creationtimestamp| type| source ---|---|--- 2026-07-06 11:12:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxxhnrhgp2j...
OESA-2026-2825 NetworkManager security update
NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHC...
CVE-2025-29329
creationtimestamp| type| source ---|---|--- 2026-07-06 11:07:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxx55vsds2i...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the default ObjectInputFilter. An attacker can trigger DNS-based information disclosure by sending a Java-serialized payload that deserializes into a collection such as HashMap containing...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the default ObjectInputFilter. An attacker can trigger DNS-based information disclosure by sending a Java-serialized payload that deserializes into a collection such as HashMap containing...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the default ObjectInputFilter. An attacker can trigger DNS-based information disclosure by sending a Java-serialized payload that deserializes into a collection such as HashMap containing...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the default ObjectInputFilter. An attacker can trigger DNS-based information disclosure by sending a Java-serialized payload that deserializes into a collection such as HashMap containing...
CVE-2026-58467
A flaw was found in Cockpit CMS. This vulnerability, a path traversal and local file inclusion, allows an unauthenticated attacker to read arbitrary files or execute PHP files. By manipulating the URL, an attacker can bypass security checks and access restricted directories. This could lead to...
CVE-2025-8591
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
CVE-2025-8591 Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Modification
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
EUVD-2025-210428
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
CVE-2025-8591
The CVE-2025-8591 entry describes a reflected cross-site scripting flaw in multiple WSO2 products, triggered by reflecting user-supplied input from a URL parameter without sufficient output encoding. The vulnerability allows an attacker to cause the user’s browser to redirect to a malicious site,...
CVE-2025-8591 Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Modification
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
CVE-2026-44936 Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials BasicAuth to any URL specified in the helm.repo...
CVE-2026-14796
creationtimestamp| type| source ---|---|--- 2026-07-06 08:51:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxpkcwf4e25 2026-07-08 12:13:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq53s3ritl2x...
CVE-2026-14799
creationtimestamp| type| source ---|---|--- 2026-07-06 08:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxpbehai425 2026-07-08 16:12:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq5j5ybzt52i...
CVE-2026-14793
creationtimestamp| type| source ---|---|--- 2026-07-06 08:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxnvuwfqf2e 2026-07-08 12:13:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq53rwys3x2a 2026-08-06 21:31:41+00:00| seen|...
CVE-2026-49099 Apache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour
Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component. The camel-salesforce producer resolves its operation parameters - the SOQL query, the SOSL search,...