28452 matches found
CVE-2026-2923
creationtimestamp| type| source ---|---|--- 2026-03-06 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-161/ 2026-03-16 15:47:07+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-gstreamer-patch-immediately 2026-03-18 04:40:09+00:00|...
CVE-2026-28719
creationtimestamp| type| source ---|---|--- 2026-03-06 04:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgehytuzzk2y...
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew MySQL, PostgreSQL. This allows...
CVE-2026-27005
Chartbrew prior to version 4.8.3 is vulnerable to unauthenticated SQL injection in queries executed against connected databases (MySQL, PostgreSQL). The root cause is arbitrary SQL being injected via user-supplied input in queries, potentially allowing reading, modification, or deletion of data d...
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew MySQL, PostgreSQL. This allows...
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew MySQL, PostgreSQL. This allows...
CVE-2026-29612
creationtimestamp| type| source ---|---|--- 2026-03-06 02:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgecfy77kd2n...
CVE-2026-3606
creationtimestamp| type| source ---|---|--- 2026-03-06 02:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgebu3eoty2u 2026-03-06 10:02:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116181652686663216...
CVE-2026-30859
creationtimestamp| type| source ---|---|--- 2026-03-06 02:37:28+00:00| published-proof-of-concept| https://github.com/Tencent/WeKnora/security/advisories/GHSA-2f4c-vrjq-rcgv 2026-03-07 16:15:53+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30859 2026-03-...
CVE-2026-28484
creationtimestamp| type| source ---|---|--- 2026-03-06 01:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7h76scz2u 2026-03-06 10:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf2judv3l2k 2026-03-06 10:01:31+00:00| seen|...
CVE-2026-26122
creationtimestamp| type| source ---|---|--- 2026-03-06 01:52:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7ayaqh52u 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:15:41+00:00| seen|...
PT-2026-23788
Flowise and Affected Versions Flowise versions prior to 3.0.13 Description Flowise is a drag & drop user interface to build a customized large language model flow. A mass assignment issue exists in the /api/v1/leads endpoint, allowing unauthenticated users to control internal entity fields id,...
Low: firefox
Issue Overview: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used...
SUSE SLES15 / openSUSE 15 Security Update : virtiofsd (SUSE-SU-2026:0816-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0816-1 advisory. This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 da...
SUSE SLED15 / SLES15 Security Update : virtiofsd (SUSE-SU-2026:0819-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0819-1 advisory. This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC...
CVE-2026-28413
creationtimestamp| type| source ---|---|--- 2026-03-05 22:12:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdsxdnyql2k...
CVE-2026-29787
creationtimestamp| type| source ---|---|--- 2026-03-05 21:42:10+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-73hc-m4hx-79pj 2026-03-07 15:15:55+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-29787...
CVE-2025-13350
creationtimestamp| type| source ---|---|--- 2026-03-05 19:29:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mgdjv5pq7w2s...