58986 matches found
CVE-2026-40263
creationtimestamp| type| source ---|---|--- 2026-04-11 15:12:15+00:00| published-proof-of-concept| https://github.com/enchant97/note-mark/security/advisories/GHSA-w6m9-39cv-2fwp 2026-04-17 03:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjny7g4tdw2k...
MINI-MCVH-9JCC-97W8
Bulletin has no description...
MINI-8CCR-MMM7-4VV7
Bulletin has no description...
MINI-GHMV-W4P8-R4VR
Bulletin has no description...
MINI-4V25-F9G7-F889
Bulletin has no description...
MINI-69QF-MQWM-GJQQ
Bulletin has no description...
GHSA-Q4QF-9J86-F5MH vulnerabilities
Vulnerabilities for packages: logstash, kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack...
CVE-2026-5144 BuddyPress Groupblog <= 1.9.3 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Group Blog IDOR
The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.3. This is due to the group blog settings handler accepting the groupblog-blogid, default-member, and groupblog-silent-add parameters from user input without proper...
CVE-2026-39880
Remnawave Backend is the backend for the Remnawave proxy and user management solution. Prior to 2.7.5, a glitch in the HWID device registration logic allows an authenticated user to bypass the configured limit for HWID devices and register more devices than expected, allowing them to resell...
CVE-2026-39921
creationtimestamp| type| source ---|---|--- 2026-04-10 22:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6deioc5b2z...
GHSA-34W8-5J2V-H6WW
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw...
CVE-2026-30232
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:20+00:00| seen| Telegram/ZRwkJT-g6xqpr38tjocBfuP9bsA0qHKZRvqY91xv80DRmI...
CGA-MHQ6-CW97-RCC6
Bulletin has no description...
CVE-2026-40252
CVE-2026-40252 affects the FastGPT AI Agent building platform. The flaw is a Broken Access Control (IDOR/BOLA) where, before version 4.14.10.4, an authenticated user from one team could access and execute applications belonging to another team by supplying a foreign appId. The root cause is that ...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the removeUnusedAttributeView process. An attacker can delete arbitrary .json files within the workspace by supplying crafted path traversal sequences in the id parameter, allowing removal of files outside the...
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...
CVE-2026-33005
Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...
CVE-2025-50666
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /webpost.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, userid, log, and time...