72255 matches found
CVE-2026-15617
CVE-2026-15617 affects Logto Identity Platform: during SSO, the system performs strict, unnormalized comparisons of identity attributes (email, issuer, identity IDs), allowing sessions to bind to unintended local accounts due to case/whitespace/Unicode differences. This can enable unauthorized ac...
ECHO-5D9D-AAA9-D093
Bulletin has no description...
ECHO-76FC-8CCD-D030
Bulletin has no description...
ECHO-6C3C-D0B8-5068
Bulletin has no description...
ECHO-D974-573E-7A5B
Bulletin has no description...
CVE-2026-59933
creationtimestamp| type| source ---|---|--- 2026-07-23 15:31:30+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i 2026-07-23 16:35:05+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3 2026-07-28 19:00:29+00:00|...
MINI-2CVG-2PFM-G4CR
Bulletin has no description...
MINI-MWH8-24W6-RM59
Bulletin has no description...
MINI-QXV6-GQGR-73HX
Bulletin has no description...
MINI-F7VM-R7CX-28JV
Bulletin has no description...
CVE-2026-65912
DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...
MINI-M4MF-JG92-2HVF
Bulletin has no description...
MINI-5443-VFW2-2X3W
Bulletin has no description...
MINI-G4RH-2Q7H-J958
Bulletin has no description...
MINI-XPRP-PQWX-4XCC
Bulletin has no description...
MINI-W9H3-W57C-HR6R
Bulletin has no description...
MINI-6489-G2JC-F7VQ
Bulletin has no description...
MINI-9MRV-8W3V-PH3Q
Bulletin has no description...