72023 matches found
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...
CVE-2026-50159
Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text c...
CVE-2026-48077 OpenReception: GET appointment by ID returns full appointment record without authorization
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at /api/tenants/id/appointments/appointmentId performs no authorization check before returning the appointment record. Any party who knows or obtains...
CVE-2026-19166
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
GHSA-FG7F-2386-8897 vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2025-49506
creationtimestamp| type| source ---|---|--- 2026-08-06 19:59:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/46253jene2lfd...
MINI-PM7G-6X34-X66X
Bulletin has no description...
CVE-2026-64597
creationtimestamp| type| source ---|---|--- 2026-08-06 17:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049822231737257...
CVE-2026-65545
Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...
MINI-2Q9M-8XXP-V452
Bulletin has no description...
MINI-3WV6-8JHJ-382V
Bulletin has no description...
MINI-8GGP-3XVV-5P3P
Bulletin has no description...
CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection
A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...
CVE-2025-15028
creationtimestamp| type| source ---|---|--- 2026-08-06 12:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dtvp6pbzlkjjo 2026-08-06 14:38:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msgbg4bidk2m 2026-08-07 09:15:08+00:00| seen|...
CVE-2026-64585
creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64585...
CVE-2026-64586
creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64586...
CVE-2026-19020
creationtimestamp| type| source ---|---|--- 2026-08-06 08:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gbgegon2uzx2u...
MINI-H6PM-3PV4-VJG7
Bulletin has no description...