51838 matches found
CVE-2026-10706
In Adalo’s no-code app builder, Versions 1 and 2 the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by design, or implement appropriate technical safeguards, allowing...
EUVD-2026-42277
In Adalo’s no-code app builder, Versions 1 and 2 the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by design, or implement appropriate technical safeguards, allowing...
CVE-2026-60092 AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel
AVideo Meet plugin through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerability in the Meet plugin's getMeetInfo.json.php endpoint. When a participant joins a public meeting, the raw HTTP User-Agent header is stored meetjoinlog.useragent without...
CVE-2026-56226 Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC
Capgo Cap-go/capgo before 12.128.2 exposes the Supabase PostgREST RPC function public.getorgsv6userid uuid, which is SECURITY DEFINER and granted to the anon role, allowing unauthenticated access. Because the function accepts a caller-supplied user UUID without verifying it matches the...
CVE-2026-8310
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported...
RHSA-2026:36344 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
Bulletin has no description...
RHSA-2026:36342 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
Bulletin has no description...
RHSA-2026:36343 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update
Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...
RHSA-2026:34789 Red Hat Security Advisory: OpenShift Container Platform 4.22.4 packages and security update
Bulletin has no description...
MAL-2026-10085 Malicious code in dependency_confusions (npm)
The npm package dependencyconfusions version 99.9.9 performs install-time host fingerprint and project path exfiltration. package.json sets index.js as the package main entrypoint and defines postinstall: node index.js. During npm install, index.js builds a JSON payload containing the local...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.47 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.47 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
GHSA-22P9-WV53-3RQ4 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-53228 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-3J78-PF43-6MVQ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53212 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-6GQ6-HXJH-9GRQ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-F3Q5-7M6P-4QXQ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...