59258 matches found
CVE-2025-50668
creationtimestamp| type| source ---|---|--- 2026-04-08 19:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370636293391705...
CVE-2026-33458
Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...
CVE-2026-34722 Zammad is missing authorization in ticket create endpoint
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4...
EUVD-2026-20562
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4...
CVE-2026-34722 Zammad is missing authorization in ticket create endpoint
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4...
CVE-2026-34722 Zammad is missing authorization in ticket create endpoint
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4...
CVE-2026-34722
CVE-2026-34722 affects the web-based helpdesk system Zammad . Prior to versions 7.0.1 and 6.5.4 , the endpoint used for ticket creation could accept a related parameter for adding links without proper authorization, exposing an access control issue. The vulnerability is fixed in the patched relea...
CVE-2026-5897
creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...
CVE-2026-5858
creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 02:28:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372387571865499 2026-04-09 17:03:07+00:00| seen|...
CVE-2026-5912
creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 01:48:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372228765427357 2026-04-09 17:41:59+00:00| seen|...
CVE-2025-14243
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...
CVE-2025-14243 Mirror-registry: openshift mirror registry: user enumeration via authentication error messages
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...
CVE-2025-14243
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation. Mitigation Mitigation for this issue is either not...
CVE-2026-2481
creationtimestamp| type| source ---|---|--- 2026-04-08 14:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiqzj6ql2o 2026-05-08 04:33:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlcvmdhyas2s...
CVE-2026-35023
creationtimestamp| type| source ---|---|--- 2026-04-08 14:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyinnt2sx2i...
CVE-2025-57853
A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...
CVE-2025-57851
A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected containe...
CVE-2026-3396
creationtimestamp| type| source ---|---|--- 2026-04-08 13:16:11+00:00| seen| Telegram/w2JXUvOVbxOFgIv0sLZ9cDyiJ5at0tkdnYt2mHRiDRLUrQ 2026-04-08 14:30:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiymuxss2i 2026-04-09 11:00:03+00:00| seen|...
CVE-2026-0233
creationtimestamp| type| source ---|---|--- 2026-04-08 13:04:52+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-331 2026-04-08 19:03:34+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3miyybbe4yt2q 2026-04-09 17:14:19+00:00| seen|...