67902 matches found
CVE-2026-8157
creationtimestamp| type| source ---|---|--- 2026-06-22 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116792585922539614 2026-06-22 07:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l 2026-06-22 08:14:26+00:00| seen|...
GHSA-WVRH-2F4M-924V
creationtimestamp| type| source ---|---|--- 2026-06-22 03:21:45+00:00| seen| https://gist.github.com/alon710/f71625529d1c2c0e0c6b0f02ed674488 2026-06-22 03:32:02+00:00| seen| https://gist.github.com/alon710/c7e86c644a18ac812b6d13eff8101d8c 2026-06-22 03:42:22+00:00| seen|...
CVE-2026-12815
creationtimestamp| type| source ---|---|--- 2026-06-22 02:16:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motsydhj222t...
PT-2026-51407
Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description A weak parsing issue exists in the x-limited-key-id header. Remote attackers can bypass subkey enforcement by submitting duplicate headers, zero, or malformed values that result in falsy values or N...
CVE-2026-12581: Session Fixation
EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in...
CVE-2026-56306: Improper Input Validation
Capgo before 12.128.2 contains a weak parsing vulnerability in the x-limited-key-id header that allows attackers to bypass subkey enforcement by submitting malformed values, zero, or duplicate headers that result in NaN or falsy values. Remote attackers can manipulate the x-limited-key-id header ...
Amazon Linux 2 : python, --advisory ALAS2-2026-3366 (ALAS-2026-3366)
The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3366 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the...
CVE-2026-8074: Incorrect Authorization
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user management write access but no Integrations access to deactivate bot accounts via the PUT /api/v4/users/id/active API...
PT-2026-51410
Name of the Vulnerable Software and Affected Versions Capgo backend Supabase edge functions versions prior to 12.128.2 Description Inconsistent authentication enforcement exists across HTTP methods. The global authentication middleware is not applied to the 'GET /private/role bindings/:org id'...
MINI-HFFP-F4HR-MFVF
Bulletin has no description...
MINI-HPC7-QFMF-J98W
Bulletin has no description...
MINI-78FJ-9WQ6-2G82
Bulletin has no description...
CVE-2026-48137
creationtimestamp| type| source ---|---|--- 2026-06-21 17:12:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mosuk6njlb22 2026-06-27 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpcht44ex42h...
MINI-PP6G-2VFF-4J5R
Bulletin has no description...
ALPINE-CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId...
CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
UBUNTU-CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId...
CVE-2026-56410
The vulnerability CVE-2026-56410 affects xmlwf in libexpat prior to 2.8.2, due to an integer overflow in resolveSystemId. Impact is indicated as high for confidentiality and integrity, with low availability impact; attack vector is local and no user interaction is required. Remedy: upgrade to lib...
