EUVD-2026-47629

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...

LimeSurvey 4.1.11 - Local File Inclusion

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. id: CVE-2020-11455 info: name: LimeSurvey 4.1.11 - Local File Inclusion author: daffainfo severity: critical...

TerraMaster TOS - Unauthenticated Remote Command Execution

TerraMaster TOS = 4.2.06 is susceptible to a remote code execution vulnerability which could allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php via the Event parameter. id: CVE-2020-28188 info: name: TerraMaster TOS - Unauthenticated Remote Command Execution...

Roundcube Webmail - Command Injection

Roundcube Webmail before 1.4.4 contains a command injection caused by shell metacharacters in configuration settings for imconvertpath or imidentifypath, letting attackers execute arbitrary code, exploit requires attacker to control configuration settings. id: CVE-2020-12641 info: name: Roundcube...

ROOT-OS-DEBIAN-13-CVE-2020-36694 CVE-2020-36694 in rootio-linux - Patched by Root

Root has patched CVE-2020-36694 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

PT-2026-63337

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer access function job events, workflow events, ad hoc command events. Three event groups - inventory update events, project update events, and system job...

ROOT-APP-MAVEN-CVE-2020-25649 CVE-2020-25649 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-25649 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2020-35785

creationtimestamp| type| source ---|---|--- 2026-07-19 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqyqkhxpdt2v...

CVE-2020-35801

creationtimestamp| type| source ---|---|--- 2026-07-19 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqyn76au5f22...

CVE-2020-4450

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/153 2026-07-19 00:00:11+00:00| published-proof-of-concept| https://t.me/reverseame/153...

CVE-2020-12668

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:04+00:00| seen| https://t.me/reverseame/320 2026-07-19 00:00:12+00:00| published-proof-of-concept| https://t.me/reverseame/320...

CVE-2020-11520

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:04+00:00| seen| https://t.me/reverseame/274 2026-07-19 00:00:12+00:00| published-proof-of-concept| https://t.me/reverseame/274...

CVE-2020-14947

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:04+00:00| seen| https://t.me/reverseame/233 2026-07-19 00:00:12+00:00| published-proof-of-concept| https://t.me/reverseame/233...

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.0 Vulnerability Details CVEID:CVE-2026-35469 DESCRIPTION: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 fram...

CVE-2020-35777

creationtimestamp| type| source ---|---|--- 2026-07-17 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqum4lftbj22...

CVE-2020-35794

creationtimestamp| type| source ---|---|--- 2026-07-17 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqukgwlmsq22...

CVE-2020-15906

creationtimestamp| type| source ---|---|--- 2026-07-16 14:00:04+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893 2026-07-17 00:00:52+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893...

ROOT-APP-NPM-CVE-2020-8203 CVE-2020-8203 in @rootio/lodash.pick - Patched by Root

Root has patched CVE-2020-8203 in the @rootio/lodash.pick package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7676 CVE-2020-7676 in @rootio/angular - Patched by Root

Root has patched CVE-2020-7676 in the @rootio/angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7720 CVE-2020-7720 in @rootio/node-forge - Patched by Root

Root has patched CVE-2020-7720 in the @rootio/node-forge package for Root:npm. Multiple fixed versions available...