11812 matches found
EUVD-2026-12140
Angular vulnerable to XSS in i18n attribute bindings...
TencentOS Server 3: perl (TSSA-2025:0643)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0643 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
BIT-PARSE-2026-30947 Parse Server ha a bypass of class-level permissions in LiveQuery
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2 and 8.6.16, class-level permissions CLP are not enforced for LiveQuery subscriptions. An unauthenticated or unauthorized client can subscribe to any LiveQuery-enabled class and...
CVE-2025-11065 affecting package kubevirt for versions less than 1.7.0-3
CVE-2025-11065 affecting package kubevirt for versions less than 1.7.0-3. A patched version of the package is available...
CVE-2025-58190 affecting package dasel for versions less than 2.8.1-3
CVE-2025-58190 affecting package dasel for versions less than 2.8.1-3. A patched version of the package is available...
CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3
CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...
CVE-2025-47911 affecting package kubevirt for versions less than 1.7.0-3
CVE-2025-47911 affecting package kubevirt for versions less than 1.7.0-3. A patched version of the package is available...
CVE-2025-58190 affecting package kubevirt for versions less than 1.7.0-3
CVE-2025-58190 affecting package kubevirt for versions less than 1.7.0-3. A patched version of the package is available...
CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3
CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...
CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-3
CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-3. A patched version of the package is available...
CVE-2025-11065 affecting package kured for versions less than 1.15.0-3
CVE-2025-11065 affecting package kured for versions less than 1.15.0-3. A patched version of the package is available...
CVE-2025-47911 affecting package dasel for versions less than 2.8.1-3
CVE-2025-47911 affecting package dasel for versions less than 2.8.1-3. A patched version of the package is available...
CVE-2025-11065 affecting package opa for versions less than 0.63.0-3
CVE-2025-11065 affecting package opa for versions less than 0.63.0-3. A patched version of the package is available...
CVE-2026-30947
Parse Server (with LiveQuery) is affected by CVE-2026-30947 where class-level permissions (CLP) are not enforced for LiveQuery subscriptions in older releases. An unauthenticated or unauthorized client could subscribe to any LiveQuery-enabled class and receive real-time events for all objects, by...
CVE-2026-30947 Parse Server ha a bypass of class-level permissions in LiveQuery
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.3 and 8.6.16, class-level permissions CLP are not enforced for LiveQuery subscriptions. An unauthenticated or unauthorized client can subscribe to any LiveQuery-enabled cla...
Incorrect Authorization
Overview @powersync/service-sync-rules is an A library containing logic for PowerSync sync rules. Affected versions of this package are vulnerable to Incorrect Authorization in the stream synchronization with config.edition: 3 and subquery filters are used without partitioning the result set. An...
Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-multi-dos-XFWkWSwz_CVE-2026-20066)
According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in ...
CVE-2026-30870 Some sync filters in PowerSync Service ignored using `config.edition: 3`
PowerSync Service is the server-side component of the PowerSync sync engine. In version 1.20.0, when using new sync streams with config.edition: 3, certain subquery filters were ignored when determining which data to sync to users. Depending on the sync stream configuration, this could result in...