72915 matches found
ECHO-3032-4565-DF6C
Bulletin has no description...
ECHO-2495-C2A6-88B6
Bulletin has no description...
ECHO-FB4E-0A86-0A3C
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-19155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a...
CVE-2026-71554
creationtimestamp| type| source ---|---|--- 2026-08-06 23:32:34+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b 2026-08-07 00:07:12+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b 2026-08-08 00:02:15+00:00| published-proof-of-concept|...
CVE-2026-48085
creationtimestamp| type| source ---|---|--- 2026-08-06 23:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5rebvv22u 2026-08-09 04:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjhxai2v 2026-08-10 03:00:26+00:00| seen|...
CVE-2026-49163
CVE-2026-49163 concerns an improper limitation of a pathname to a restricted directory (path traversal) in Application Insights Profiler, enabling an authorized attacker to elevate privileges over the network. The entry specifies a CVSSv3.1 base score of 8.8 (High) with Network attack vector, Low...
CVE-2026-70636
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers...
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...
CVE-2026-50159
Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text c...
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...
CVE-2026-48077 OpenReception: GET appointment by ID returns full appointment record without authorization
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at /api/tenants/id/appointments/appointmentId performs no authorization check before returning the appointment record. Any party who knows or obtains...
CVE-2026-19166
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
GHSA-FG7F-2386-8897 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
ECHO-15C1-BB78-DBE9
Bulletin has no description...
ECHO-5E92-F075-6B1A
Bulletin has no description...
CVE-2025-49506
creationtimestamp| type| source ---|---|--- 2026-08-06 19:59:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/46253jene2lfd...
MINI-PM7G-6X34-X66X
Bulletin has no description...