1251337 matches found
CVE-2026-73140
The CVE-2026-73140 issue affects cti-transmute: build_evaluation_report() exported evaluation reports without applying access controls to evaluation comments, allowing a user who can view a conversion to export Markdown/PDF reports containing private comments and the comment author’s name. The ro...
EUVD-2026-55970
Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges,...
WordPress Stream – Activity Log & Audit Trail plugin <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by Yat in WordPress Plugin Stream versions = 4.2.0...
CVE-2026-11985
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
CVE-2026-10025
creationtimestamp| type| source ---|---|--- 2026-08-11 05:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrtsmtjth2x...
CVE-2026-11985
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
CVE-2026-11985 Cross-thread FPU register leak on ARM when FPU enabled without register sharing
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
EUVD-2026-55936
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
CVE-2026-11985
CVE-2026-11985 describes a cross-thread information leak on the Zephyr ARM port when the hardware FPU is enabled (CONFIG_FPU) but FPU register sharing is disabled. With default FP_ABI (FP_HARDABI) or FP_SOFTABI, FP instructions can be emitted in any function, while callee-saved FP registers (s16-...
CVE-2026-51583
creationtimestamp| type| source ---|---|--- 2026-08-11 04:54:29+00:00| seen| https://gist.github.com/seiyaibuki0523/d8af15eb555808319a2633269a9ebb80 2026-08-11 15:00:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dnjjgpnninjk4...
CVE-2026-8917
creationtimestamp| type| source ---|---|--- 2026-08-11 03:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gq4s6uzcwa454 2026-08-11 19:02:37+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117078422749026103 2026-08-12 14:05:18+00:00| seen|...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-9XWG-3R6F-JCX2 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-61632 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-66778
SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is...
CVE-2026-66773
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability...
CVE-2026-58247
SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application...
CVE-2026-58244
SAP Manufacturing Integration and Intelligence MII does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker...
CVE-2025-30239
creationtimestamp| type| source ---|---|--- 2026-08-11 00:31:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5v6qk7tuiujhx...
EUVD-2026-55890
SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is...