72245 matches found
CVE-2026-54560
Cloudreve is a self-hosted file management and sharing system. From 4.12.0 until 4.16.1, Cloudreve's OAuth access tokens are issued without the OAuth clientid claim, so the JWT verifier does not load token scopes into request context and RequiredScopes treats the request like non-scoped session...
CVE-2026-54058
creationtimestamp| type| source ---|---|--- 2026-07-15 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoxacvh3y2j 2026-07-20 21:46:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4benmlmo2q 2026-07-20 22:37:49+00:00| published-proof-of-concept|...
CGA-3F93-WHMH-CG39
Bulletin has no description...
GHSA-39PV-4J6C-2G6V vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2026-49501
creationtimestamp| type| source ---|---|--- 2026-07-15 13:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqouq5kqrm2i...
CGA-FCFW-JR2W-4QXW
Bulletin has no description...
CGA-QGGX-9F44-V55X
Bulletin has no description...
CGA-8G3G-5W5F-P9RF
Bulletin has no description...
CVE-2026-15690
creationtimestamp| type| source ---|---|--- 2026-07-15 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqon5ostp52g 2026-07-21 08:49:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5ggyp73z27 2026-07-21 08:49:52+00:00| seen|...
CVE-2026-59236 Authorization bypass in Prospero Flow CRM Excel import allows cross-tenant record injection
Authorization Bypass Through User-Controlled Key CWE-639 in the Excel import handlers CustomerImport, LeadImport, ProductImport in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to create customer, lead, and product records inside another company...
CVE-2026-59236
Authorization Bypass Through User-Controlled Key CWE-639 in the Excel import handlers CustomerImport, LeadImport, ProductImport in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to create customer, lead, and product records inside another company...
MINI-RJGH-6C8P-Q8X2
Bulletin has no description...
MINI-2XC6-8WQC-666Q
Bulletin has no description...
MINI-CW7C-8P24-WGQW
Bulletin has no description...
MINI-XJJH-4WJ8-8M2F
Bulletin has no description...
MINI-9MC4-V32G-R3FM
Bulletin has no description...
MINI-JGJJ-J7WR-V2R9
Bulletin has no description...
MINI-J2PM-W645-XVH7
Bulletin has no description...