Lucene search
+L

15409 matches found

OSV
OSV
added 2026/07/09 9:48 p.m.15 views

CVE-2026-53961 Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding)

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...

6.5CVSS6.1AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/07/09 9:48 p.m.42 views

CVE-2026-53961 Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding)

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...

6.5CVSS0.003EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/07/09 9:48 p.m.13 views

CVE-2026-53961

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...

6.5CVSS6AI score0.003EPSS
SaveExploits0References10Affected Software1
Chainguard
Chainguard
added 2026/07/09 2:17 p.m.22 views

GHSA-MG7H-Q7HW-M596 vulnerabilities

Vulnerabilities for packages: linux-aws...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/09 12:00 a.m.26 views

PT-2026-56998

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description The AWS SES bounce webhook at the endpoint "POST /webhooks/aws" verifies that SNS...

6.5CVSS6.1AI score0.003EPSS
SaveExploits0References17
OSV
OSV
added 2026/07/08 8:32 p.m.17 views

CVE-2026-55542 Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL

Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, authenticated users who know a signature filename can obtain a 5-minute signed S3 URL because the S3 branch returns...

5.3CVSS6.1AI score
SaveExploits0References4
NVD
NVD
added 2026/07/08 5:17 p.m.20 views

CVE-2026-59897

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

5.3CVSS0.0018EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/08 4:06 p.m.9 views

CVE-2026-59897

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

4.8CVSS6AI score0.0018EPSS
SaveExploits0References4Affected Software1
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.22 views

CVE-2026-53139 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

5.5CVSS5AI score0.00123EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.33 views

GHSA-RC47-M48R-2657 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.17 views

CVE-2026-53132 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

7.1CVSS3.9AI score0.00186EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.18 views

CVE-2026-53149 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

7.1CVSS3.9AI score0.00126EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.24 views

CVE-2026-53168 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

5.5CVSS5AI score0.00162EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.15 views

CVE-2026-53181 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

5.5CVSS3.9AI score0.00123EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.15 views

CVE-2026-53191 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

7.8CVSS3.9AI score0.00175EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.19 views

CVE-2026-53202 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

7.8CVSS3.9AI score0.00156EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.29 views

CVE-2026-53203 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

7.1CVSS3.9AI score0.00192EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.20 views

CVE-2026-53212 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

7.8CVSS3.9AI score0.00151EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.18 views

CVE-2026-53228 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

9.8CVSS5.1AI score0.00514EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/08 2:17 a.m.17 views

GHSA-38RG-2RJC-3RMJ vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-qemu-melange, linux-vmware...

5.2AI score
SaveExploits0
Rows per page
Query Builder