67650 matches found
CVE-2026-13603
creationtimestamp| type| source ---|---|--- 2026-07-01 22:27:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmksvl2xj2q 2026-07-03 11:58:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqimivyih2i...
CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement
Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...
CVE-2026-14112
creationtimestamp| type| source ---|---|--- 2026-07-01 21:48:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmimyys6s2d 2026-07-02 08:17:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:44+00:00| seen|...
CVE-2026-14054
creationtimestamp| type| source ---|---|--- 2026-07-01 21:26:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhfmb6zh2b 2026-07-01 21:26:12+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmhfnhf4z2g 2026-07-02 07:50:48+00:00| seen|...
CVE-2026-13939
creationtimestamp| type| source ---|---|--- 2026-07-01 21:05:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgbba7652o 2026-07-02 07:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the JWKS key caching process. An attacker can gain unauthorized access to another issuer or tenant's resources by crafting a valid token for one allowed issuer and exploiting the cache...
GHSA-7HW4-X97Q-5WX2 vulnerabilities
Vulnerabilities for packages: firefox-esr...
CVE-2026-33343 vulnerabilities
Vulnerabilities for packages: juicefs...
SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission
RELATE creates an edge record between two existing records, and SurrealDB enforces the CREATE permission on the edge table for this operation. When the statement included a SET id = edge:existing clause, however, the new edge's id ended up pointing at an record that was already in storage. Rather...
GHSA-F82J-V89J-MF86 SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission
RELATE creates an edge record between two existing records, and SurrealDB enforces the CREATE permission on the edge table for this operation. When the statement included a SET id = edge:existing clause, however, the new edge's id ended up pointing at an record that was already in storage. Rather...
GHSA-6VG3-HGRW-P5GF SurrealDB has an Authorization Bypass via Composite Record-id Paths
An authenticated user could bypass permission rules that gated access on parts of a record's id — most commonly tenant-isolation rules of the form PERMISSIONS FOR select WHERE id.tenant = $auth.id.tenant. The same defect also let UNIQUE constraints defined on parts of an id admit duplicate entrie...
SurrealDB has an Authorization Bypass via Composite Record-id Paths
An authenticated user could bypass permission rules that gated access on parts of a record's id — most commonly tenant-isolation rules of the form PERMISSIONS FOR select WHERE id.tenant = $auth.id.tenant. The same defect also let UNIQUE constraints defined on parts of an id admit duplicate entrie...
CVE-2026-13880
creationtimestamp| type| source ---|---|--- 2026-07-01 20:01:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmcnsupo222 2026-07-02 07:22:11+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...
CVE-2026-13819
creationtimestamp| type| source ---|---|--- 2026-07-01 19:50:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmc2eecjz22 2026-07-02 07:19:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:41:27+00:00| seen|...
CVE-2026-13817
creationtimestamp| type| source ---|---|--- 2026-07-01 19:31:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmayj5ohn2q 2026-07-02 07:19:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:15:41+00:00| seen|...
MINI-36JH-XMVM-MRPH
Bulletin has no description...
MINI-8QXW-JVJF-WXVQ
Bulletin has no description...
MINI-F5RW-F9FF-RC37
Bulletin has no description...