174701 matches found
MINI-H6XJ-3PQG-FHQ5
Bulletin has no description...
CVE-2026-73683
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-63650
OpenVPN 2.7_alpha1 through 2.7.5 with mbedTLS is affected by a misidentification issue where remote authenticated users can be misidentified due to ignoring the configured X.509 username identity lookup field. The vulnerability affects OpenVPN components from the specified 2.7 alpha to 2.7.5 rang...
CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
CVE-2026-73683
CVE-2026-73683 affects Laravel Socialite’s Facebook provider. The flaw allows unauthenticated attackers to replay captured OIDC id_tokens via a missing nonce validation in FacebookProvider.php’s getUserByOIDCToken(), so a valid, unexpired id_token for the same Facebook App ID can be submitted to ...
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
MINI-9XV6-MF37-53HJ
Bulletin has no description...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: kafbat-ui-fips, flink-kubernetes-operator-fips, kafka-fips, strimzi-kafka-operator-fips, druid, airbyte-server-fips, apache-activemq-artemis, cruise-control-fips, neo4j, sonarqube, apache-activemq, opensearch, flink, ghidra, apache-tika, hono, wavefront-proxy,...
CVE-2026-71311 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-8V25-V8P6-QF7V vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-54572 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-73643 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, renovate...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...
CVE-2026-64887
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...
CVE-2026-19908
PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...
CVE-2026-17182
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...