57939 matches found
ECHO-6F24-CDD7-9E3E
Bulletin has no description...
CVE-2026-29988
creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:42+00:00| seen| https://www.jerrygamblin.com/2026/07/22/hydrate-hack-repeat-security-summer-camp-2026/...
CVE-2026-59943
creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:05+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-j8qw-6jw8-r297...
PT-2026-64786
CVE ID :CVE-2026-48533 Published : July 23, 2026, 3:27 p.m. | 49 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-60369
...
CVE-2026-60368
...
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
Summary Netty's OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID. A bad actor can replay a GOOD status response issued for an unrelated certificate by the same CA to bypass revocation checks for any certificate. Details...
EUVD-2026-47582
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks...
CVE-2026-64829
creationtimestamp| type| source ---|---|--- 2026-07-22 21:00:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb7rkbnw323...
EUVD-2026-47803
OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...
CVE-2026-13089 OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify
OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...
CVE-2026-61238
creationtimestamp| type| source ---|---|--- 2026-07-22 19:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb323ok5m24 2026-07-23 18:18:16+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61207
creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sutips2j 2026-07-23 18:17:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings...
EUVD-2026-47770
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication MFA configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA...
CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication MFA configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA...
EUVD-2026-47769
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...
CVE-2026-16624
CVE-2026-16624 affects Cal.com OSS, where there is an authorization bypass on webhook creation via unvalidated teamId injection. Any authenticated user can create a webhook on any team and potentially exfiltrate booking data (e.g., organizer/attendee emails and custom responses) and, in some case...
CVE-2026-16624 CVE-2026-16624
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...