59029 matches found
CVE-2026-56216
Capgo before 12.128.2 is vulnerable to a scope escalation in POST /functions/v1/apikey where app-limited API keys can mint unrestricted keys by sending empty limits. An compromised app-limited key can create an org-wide, unrestricted key accessing resources such as app listings and protected endp...
CVE-2026-45480
creationtimestamp| type| source ---|---|--- 2026-06-19 22:51:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mooglnzo6y2e 2026-06-20 05:49:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116780864325937512 2026-06-21 23:40:09+00:00| seen|...
CVE-2026-48584
creationtimestamp| type| source ---|---|--- 2026-06-19 22:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moofhtv2b42q 2026-06-22 00:36:50+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnfcrouu2v 2026-06-22 09:01:14+00:00| seen|...
CVE-2026-48774
creationtimestamp| type| source ---|---|--- 2026-06-19 22:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodtrcp2c2g...
CVE-2026-49345
creationtimestamp| type| source ---|---|--- 2026-06-19 22:00:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodq6gmp52g...
CVE-2026-49295
creationtimestamp| type| source ---|---|--- 2026-06-19 21:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodmsmybf2i...
OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types
On OpenBao 2.5.4 and 2.5.2and likely earlier versions also, an authenticated caller with write access to transit/keys/ can crash the OpenBao server by issuing a single key-creation request that combines an asymmetric type rsa-, ecdsa-, ed25519 with derived: true. The server returns no HTTP respon...
Reachable Assertion
Overview Affected versions of this package are vulnerable to Reachable Assertion in the transit key creation process when an asymmetric type is combined with derived: true. An attacker can cause the server process to terminate unexpectedly by sending a crafted key creation request with these...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization in the authorization process for public assets. An attacker can perform unauthorized actions such as creating, updating, reapplying, and deleting VEX rules, as well as making changes to vulnerability-triage...
CVE-2026-48089
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can create,...
CVE-2026-48089 DevGuard has improper authorization on public assets
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can create,...
CVE-2008-6554
creationtimestamp| type| source ---|---|--- 2026-06-19 19:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monzzw6ltg2e...
CVE-2026-56209
creationtimestamp| type| source ---|---|--- 2026-06-19 18:34:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mony7lyhgq2h...
CVE-2026-12238 WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation
The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.1.01. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers ...
CVE-2017-20278
creationtimestamp| type| source ---|---|--- 2026-06-19 18:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxnonphx2q...
CVE-2007-4429
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e266fba-200b-4258-b2f9-39832a04f57f...
CVE-2011-1950
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:38+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa8db595-da1c-47fa-bac7-87cac472ba08 2026-06-23 14:04:10+00:00| exploited|...
CVE-2009-4476
creationtimestamp| type| source ---|---|--- 2026-06-19 16:37:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monrnmqu5u2n...
CVE-2026-56142
creationtimestamp| type| source ---|---|--- 2026-06-19 16:35:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monrkomijt2z 2026-06-20 14:01:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mopzg6xmjp2d 2026-06-26 13:45:05+00:00| seen|...