58267 matches found
MINI-2WGG-C5QM-RR63
Bulletin has no description...
CVE-2026-56422
CVE-2026-56422 affects MISP core controllers and models where client-controlled fields (ids and ownership/scope keys such as event_id, org_id, user_id, sharing_group_id, galaxy_cluster_uuid, organisation_uuid, etc.) were not consistently stripped or revalidated, enabling an authenticated user to ...
CVE-2026-12581
EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in...
CVE-2026-8157
creationtimestamp| type| source ---|---|--- 2026-06-22 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116792585922539614 2026-06-22 07:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l 2026-06-22 08:14:26+00:00| seen|...
GHSA-WVRH-2F4M-924V
creationtimestamp| type| source ---|---|--- 2026-06-22 03:21:45+00:00| seen| https://gist.github.com/alon710/f71625529d1c2c0e0c6b0f02ed674488 2026-06-22 03:32:02+00:00| seen| https://gist.github.com/alon710/c7e86c644a18ac812b6d13eff8101d8c 2026-06-22 03:42:22+00:00| seen|...
CVE-2026-12815
creationtimestamp| type| source ---|---|--- 2026-06-22 02:16:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motsydhj222t...
PT-2026-51407
Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description A weak parsing issue exists in the x-limited-key-id header. Remote attackers can bypass subkey enforcement by submitting duplicate headers, zero, or malformed values that result in falsy values or N...
PT-2026-51410
Name of the Vulnerable Software and Affected Versions Capgo backend Supabase edge functions versions prior to 12.128.2 Description Inconsistent authentication enforcement exists across HTTP methods. The global authentication middleware is not applied to the 'GET /private/role bindings/:org id'...
Amazon Linux 2 : python, --advisory ALAS2-2026-3366 (ALAS-2026-3366)
The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3366 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the...
MINI-HFFP-F4HR-MFVF
Bulletin has no description...
MINI-HPC7-QFMF-J98W
Bulletin has no description...
MINI-78FJ-9WQ6-2G82
Bulletin has no description...
CVE-2026-48137
creationtimestamp| type| source ---|---|--- 2026-06-21 17:12:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mosuk6njlb22 2026-06-27 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpcht44ex42h...
MINI-PP6G-2VFF-4J5R
Bulletin has no description...
ALPINE-CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId...
CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
UBUNTU-CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId...
CVE-2026-56410
The vulnerability CVE-2026-56410 affects xmlwf in libexpat prior to 2.8.2, due to an integer overflow in resolveSystemId. Impact is indicated as high for confidentiality and integrity, with low availability impact; attack vector is local and no user interaction is required. Remedy: upgrade to lib...