72346 matches found
CVE-2026-44731 OpenProject: Improper Access Control on OpenProject through /projects/[projectName]/meetings via "invited_user_id" in GET parameter "filters" leads to user names disclosure
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the web application's meetings filter feature leaks whether a given user ID corresponds to a valid account and discloses the user's full name, allowing an attacker to enumerate all existing user account...
EUVD-2026-39859
In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pciname for debugfs directory naming Use pcinamepdev for the per-device debugfs directory instead of hardcoded "0" for PFs and pcislotnamepdev-slot for VFs. The previous approach had two issues: 1. pcislotname...
CVE-2026-53317 wifi: mt76: mt7921: Place upper limit on station AID
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Place upper limit on station AID Any station configured with an AID over 20 causes a firmware crash. This situation occurred in our testing using an AP interface on 7922 hardware, with a modified hostapd,...
CVE-2026-53283
CVE-2026-53283 concerns the Linux kernel AMD IOMMU driver. The issue arises when the inlined check path in __rlookup_amd_iommu() performs an out-of-bounds read on rlookup_table[devid] for a PCI device whose BDF isn’t described by IVRS. Prior to the commit that changed kvalloc() usage, the over-re...
CVE-2026-44732
OpenProject vulnerability CVE-2026-44732 affects the web-based project management tool prior to versions 17.3.2 and 17.4.0. The flaw occurs in the /api/v3/documents/{id} PATCH endpoint, where attacker-controlled attributes are applied to the persisted record before authorization checks, allowing ...
MINI-Q6V8-8P88-92VV
Bulletin has no description...
MINI-275J-P7HJ-632X
Bulletin has no description...
MINI-69WR-3RVQ-XQM6
Bulletin has no description...
MINI-7QCC-2WXQ-7W6C
Bulletin has no description...
Exploit for CVE-2026-46331
🚨 CVE-2026-46331 - Linux Kernel COW Bug Linux Kernel n...
External Control of File Name or Path
Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...
CVE-2026-45405
creationtimestamp| type| source ---|---|--- 2026-06-26 18:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7m5luydh2c 2026-06-30 00:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mphphj2ody2g...
CGA-4JC3-M65R-HF69
Bulletin has no description...
CVE-2026-57667
creationtimestamp| type| source ---|---|--- 2026-06-26 18:10:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7k4qx6ij2n 2026-06-30 14:17:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpj6xloow725...
CVE-2026-57315
creationtimestamp| type| source ---|---|--- 2026-06-26 18:05:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7jtsha6v2j...
CVE-2025-60464
creationtimestamp| type| source ---|---|--- 2026-06-26 17:36:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp7i7rohct2t...
BELL-CVE-2026-56123
Bulletin has no description...
CVE-2026-57653
creationtimestamp| type| source ---|---|--- 2026-06-26 17:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hnsaozf2c 2026-07-05 12:16:39+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpvkkmshge2z...
CVE-2026-56064
creationtimestamp| type| source ---|---|--- 2026-06-26 17:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hdoavy42r 2026-08-01 03:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrykizm3ud2r...