Apache Artemis 安全漏洞

Apache Artemis is a messaging broker software developed by the Apache Foundation. Versions of Apache Artemis such as 2.52.0 and earlier, as well as Apache ActiveMQ Artemis versions like 2.44.0 and earlier, have security vulnerabilities. These vulnerabilities stem from improper authorization, whic...

CVE-2026-33634

creationtimestamp| type| source ---|---|--- 2026-03-23 22:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5vaikg22i 2026-03-24 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116281208959546737 2026-03-24 00:00:42+00:00| seen|...

CVE-2026-23482

creationtimestamp| type| source ---|---|--- 2026-03-23 22:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5puj2272f 2026-04-27 12:07:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-23482.yaml...

CVE-2026-32066

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53nxmet2n 2026-03-23 23:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr637lvre26...

CVE-2026-32299

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53alsvy2q 2026-03-25 02:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhtzo455hr2i...

CVE-2025-60949

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr52w6h442g 2026-03-23 22:44:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr5525dmv2u 2026-03-25 22:00:15+00:00| seen|...

CVE-2026-32276

creationtimestamp| type| source ---|---|--- 2026-03-23 22:30:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4f4hwqo2c 2026-03-23 22:31:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4fviqoh2f 2026-03-23 23:34:10+00:00| seen|...

CVE-2026-32902

creationtimestamp| type| source ---|---|--- 2026-03-23 22:29:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4cx7tpn2e 2026-03-23 23:29:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr7ngsypm2g...

CVE-2026-33679

creationtimestamp| type| source ---|---|--- 2026-03-23 21:44:39+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-g9xj-752q-xh63 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33679...

CVE-2026-23486

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

EUVD-2026-14545

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

CVE-2026-23882 Blinko: Admin RCE - MCP Server Command Injection

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

EUVD-2026-14544

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23488

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23488

Blinko is affected prior to version 1.8.4. The /api/v1/comment/create endpoint allows unauthorized posting of comments to any note (including private ones), and /api/v1/comment/list allows unauthorized viewing of comments on all notes. The issue is fixed in version 1.8.4. CVSS v4.0 base score 6.9...

CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23486

The CVE-2026-23486 vulnerability affects Blinko prior to version 1.8.4, where a publicly accessible endpoint exposed all user information (usernames, roles, and account creation dates). The issue is caused by an exposed endpoint, with impacts limited to information disclosure (low confidentiality...

EUVD-2026-14541

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

CVE-2026-23486

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...