48635 matches found
CVE-2026-72743
SQLBot 1.10.0 contains a stored XSS in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. If an attacker can modify the dashboard text widget, they can inject arbitrary HTML/JavaScript that executes for all dashboard viewers. The issue is fixed in commit c...
CVE-2026-72743 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
GHSA-R28C-9Q8G-F849
creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-17 10:21:36+00:00| seen|...
CVE-2026-72864
creationtimestamp| type| source ---|---|--- 2026-08-10 19:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtkshfew2z 2026-08-10 20:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvcczrjp2h 2026-08-11 23:01:36+00:00| seen|...
MINI-F625-8C3M-JCQ6
Bulletin has no description...
MINI-86MC-VV77-V6F2
Bulletin has no description...
MINI-8JVW-WGV3-HP5J
Bulletin has no description...
CVE-2026-16626
creationtimestamp| type| source ---|---|--- 2026-08-10 19:22:35+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqt4k3bcc2v...
CVE-2021-34513
creationtimestamp| type| source ---|---|--- 2026-08-10 19:06:29+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3msqsamyhth2x...
CGA-6X9F-W6MR-2RRJ
Bulletin has no description...
CGA-W8WR-74CW-W46C
Bulletin has no description...
java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server
A flaw was found in the ORB Object Request Broker component of IBM SDK, Java Technology Edition. A malicious IIOP Internet Inter-ORB Protocol server could exploit this vulnerability to force the loading and creation of unauthorized software components. This could lead to the execution of arbitrar...
CGA-6R2X-67QX-CRJ7
Bulletin has no description...
CGA-4M44-376G-9JG3
Bulletin has no description...
CGA-M9QP-HPHV-Q57X
Bulletin has no description...
CGA-VPP4-W684-47MX
Bulletin has no description...
CVE-2026-68152
creationtimestamp| type| source ---|---|--- 2026-08-10 13:53:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117071543148752935...
MINI-8M8G-JG9P-86VJ
Bulletin has no description...