64777 matches found
CVE-2026-22659 FlaskBB Authorization Bypass via Topic ID Manipulation
FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in forums they do not control by submitting crafted topic ID lists. Attackers can include a low-ID topic from a permitted...
CVE-2026-22659
FlaskBB up to version 2.2.0 is vulnerable to an authorization bypass. The issue arises when an attacker manipulates a batch request with crafted topic ID lists, causing a low-ID topic from a permitted forum to be used as an anchor and bypass the permission check applied only to the first result. ...
CVE-2026-14475
creationtimestamp| type| source ---|---|--- 2026-07-10 12:10:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4ksozb32a 2026-07-10 16:50:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcm7br7362s 2026-07-10 21:14:19+00:00| seen|...
CVE-2026-12108
creationtimestamp| type| source ---|---|--- 2026-07-10 12:02:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc43ygvab2e 2026-07-10 21:13:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2v5rp452s 2026-07-10 21:13:31+00:00| seen|...
CVE-2026-40454
creationtimestamp| type| source ---|---|--- 2026-07-10 11:11:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbz7ub5sf2f 2026-07-10 12:15:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40454 2026-07-10 13:34:44+00:00| seen|...
CVE-2026-59724
A flaw was found in Engine.IO. When Engine.IO servers have WebTransport enabled, a remote attacker can craft a session ID to resolve an inherited property of the clients object during WebTransport upgrade handling. This can lead to a TypeError, resulting in a denial of service DoS for the server...
CVE-2026-15330
creationtimestamp| type| source ---|---|--- 2026-07-10 09:57:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbv4pxta22y...
CVE-2026-14475
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 'scanid' parameter in all versions up to, and including, 4.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...
GHSA-5QWX-4Q7J-HWM2 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-qemu-melange...
GHSA-MCCM-G2CW-25J9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RJCX-5J87-VP95 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X6W2-JPMX-X267 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-V598-MR98-5866 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X454-5847-5CWH vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13785 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2M65-XXR3-MHCV vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-14008 vulnerabilities
Vulnerabilities for packages: chromium...
MINI-4HR8-C2M5-6945
Bulletin has no description...
MINI-PW32-98G2-F6C7
Bulletin has no description...
EUVD-2026-42844
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 'scanid' parameter in all versions up to, and including, 4.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...