50729 matches found
PT-2026-56090
Summary A command injection vulnerability existed in the Maven scanning flow of cdxgen before version 12.4.3. When cdxgen scanned an attacker-controlled Maven project, repository-controlled paths could be used in the Maven command construction. In affected versions, some Maven invocations were...
CVE-2026-50137: Missing Authorization
Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id app... and an S3-source datasource id ds... can call this endpoint with no auth and obtain a 15-minute pre-signed PUT URL minted on the victim's IAM identity. The endpoin...
D-Link DIR-513 Router Buffer Overflow DoS
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...
CVE-2026-11310
creationtimestamp| type| source ---|---|--- 2026-06-25 23:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5kwkjft62b 2026-07-04 06:39:39+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpshb47h7d2m 2026-07-04 06:39:43+00:00| seen|...
CVE-2026-12921
creationtimestamp| type| source ---|---|--- 2026-06-25 23:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5ki5tddm2o...
CVE-2017-14911
creationtimestamp| type| source ---|---|--- 2026-06-25 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5kak4uwg2n...
CVE-2026-55413
creationtimestamp| type| source ---|---|--- 2026-06-25 23:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jxw3m5w2r...
CVE-2026-11703
creationtimestamp| type| source ---|---|--- 2026-06-25 22:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5iqs5h7w2z...
CVE-2017-14906
creationtimestamp| type| source ---|---|--- 2026-06-25 22:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5ikwearb2q...
GO-2026-5651 Mattermost doesn't check the create_post channel permission during post edit operations in github.com/mattermost/mattermost-server
Mattermost doesn't check the createpost channel permission during post edit operations in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
GO-2026-5621 Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access in github.com/kyverno/kyverno
Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access in github.com/kyverno/kyverno...
GO-2026-5468 goshs: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload in github.com/patrickhener/goshs
goshs: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in goshs POST multipart upload in github.com/patrickhener/goshs...
GO-2026-5442 Mattermost doesn't enforce the PostEditTimeLimit on non-message post fields in github.com/mattermost/mattermost-server
Mattermost doesn't enforce the PostEditTimeLimit on non-message post fields in github.com/mattermost/mattermost-server...
CVE-2026-6329
creationtimestamp| type| source ---|---|--- 2026-06-25 22:21:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5ho6uh4b22...
DEBIAN-CVE-2026-55962
TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...
CVE-2026-55962
TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...
UBUNTU-CVE-2026-55962
TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...
CVE-2026-55962
TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...
