40327 matches found
CVE-2026-0205
Technical details are not publicly available in the provided documents; no affected versions, vectors, or fixes are included. Monitor official advisories for updates.
CVE-2026-0205
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services...
CVE-2026-0205
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services...
CVE-2026-40229
Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered unescaped in public forum threads where they participate, in the admin ticket view, and in HTML...
EUVD-2026-26244
Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered unescaped in public forum threads where they participate, in the admin ticket view, and in HTML...
CVE-2026-40229 Helpy 2.8.0 - Stored XSS in post author display via PostsHelper
Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered unescaped in public forum threads where they participate, in the admin ticket view, and in HTML...
Jenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerability
Jenkins Microsoft Entra ID previously Azure AD Plugin versions 666.v6060de32f87d and earlier do not restrict the redirect URL after login. This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful...
CVE-2026-2902
creationtimestamp| type| source ---|---|--- 2026-04-29 15:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknf2z2skm2p...
CVE-2026-42645
creationtimestamp| type| source ---|---|--- 2026-04-29 14:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkne2obrr22e...
CVE-2026-42525
creationtimestamp| type| source ---|---|--- 2026-04-29 14:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndkgtahk2n...
CVE-2026-42602
creationtimestamp| type| source ---|---|--- 2026-04-29 14:41:10+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-pjv4-3c63-699f 2026-05-14 14:50:16+00:00| seen|...
CVE-2026-42648
creationtimestamp| type| source ---|---|--- 2026-04-29 14:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndbszbdj2q...
CVE-2026-42642
creationtimestamp| type| source ---|---|--- 2026-04-29 14:37:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknd5xzt7p2n...
CVE-2026-42521
creationtimestamp| type| source ---|---|--- 2026-04-29 14:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknd2fatm72q...
CVE-2026-42523
creationtimestamp| type| source ---|---|--- 2026-04-29 14:26:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknclb2n7s2k 2026-04-30 04:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkorqf3ol323 2026-04-30 04:30:43+00:00| seen|...
SonicOS affected by multiple vulnerabilities
1 CVE-2026-0204 - SonicOS Improper Access Control VulnerabilityA vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.CVSS Score: 8.0CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCWE-1390:...
CVE-2026-7275
creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a 2026-07-13 22:00:04+00:00| seen|...
CVE-2026-33467
creationtimestamp| type| source ---|---|--- 2026-04-29 12:45:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn4wiloup2h...