3342 matches found
USN-8215-1 dotnet10 vulnerability
It was discovered that the Microsoft.AspNetCore.DataProtection library in .NET did not properly verify cryptographic signatures under certain conditions. A remote attacker could possibly use this issue to elevate privileges...
CVE-2026-40978
creationtimestamp| type| source ---|---|--- 2026-04-27 11:57:47+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-397 2026-04-28 12:17:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkkkritijh27 2026-04-29 19:07:08+00:00| seen|...
PT-2026-47321
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67 Description An out-of-bounds read occurs when using mod headers and mod mime in conjunction with multiple response languages. An out-of-bounds read is a condition where a program reads data past...
CVE-2026-27172
creationtimestamp| type| source ---|---|--- 2026-04-26 18:56:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgab3vjum2u 2026-07-13 22:00:11+00:00| seen| https://t.me/GithubRedTeam/92169 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92169 2026-07-14...
BELL-CVE-2026-31477
Bulletin has no description...
BELL-CVE-2026-31667
Bulletin has no description...
Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions
The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope. Users are...
GHSA-6VGR-CP5C-FFX3 vulnerabilities
Vulnerabilities for packages: openbao...
PT-2026-34877
Name of the Vulnerable Software and Affected Versions The product name cannot be determined versions prior to 3.2.1 Description The asset dependency graph fails to restrict nodes based on the viewer's DAG read permissions. This allows a user with read access to at least one DAG to browse the asse...
CVE-2026-6942
creationtimestamp| type| source ---|---|--- 2026-04-23 21:45:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6yc5tusr2k 2026-04-23 23:26:58+00:00| seen| Telegram/EOmUzEDCCjVld0ErnrIDoAMYFcT1xcXC6s4XJmAqdlxQalE 2026-06-04 17:08:21+00:00| seen|...
CVE-2026-35382
Voluntarily withdrawn...
CGA-4V96-9GCC-JWVR
Bulletin has no description...
CGA-5RF2-WM38-PWM7
Bulletin has no description...
CVE-2026-34270
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
CVE-2026-21998
...
RHSA-2025:2067
creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:38+00:00| seen| Telegram/4zRGsEPwCWPOVkiJwGYn1RsXuEnREKMT0DdgACfDkyyoA...
MINI-63XM-64H7-PV4P
Bulletin has no description...
CVE-2026-6618 langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...