CVE-2026-95685 MISP Missing Authorization on replaceSuggestionInReport Event Report Action

MISP contains an access control flaw in the EventReports functionality. The replaceSuggestionInReport action, which allows modification of suggestion content within an event report, was incorrectly mapped to the wildcard permission '' in the ACLComponent, making it accessible to any authenticated...

CVE-2026-95685

MISP contains an access control flaw in the EventReports functionality. The replaceSuggestionInReport action was incorrectly mapped to the wildcard permission ('*') in the ACLComponent, making it accessible to any authenticated user regardless of their assigned permissions. All analogous report-m...

CVE-2026-15227

Missing authorization in Checkmk 2.5.0p10, 2.4.0p35, 2.3.0p49, and 2.2.0 EOL allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users...

EUVD-2016-0377

Malware in sbrugna...

CVE-2019-5941

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'...

zoopla.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-643820 Description| Value ---|--- Affected Website:| zoopla.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

myjobs.lk XSS vulnerability

Open Bug Bounty ID: OBB-592287 Description| Value ---|--- Affected Website:| myjobs.lk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nowplayingnashville.com XSS vulnerability

Open Bug Bounty ID: OBB-570874 Description| Value ---|--- Affected Website:| nowplayingnashville.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HackerOne: Team Member███ associated with a Custom Group Created with 'Program Managment' only permissions can Comments on Bug Reports

Hi Team, Legend ====== AppSecBounty = Bug ProgramSandbox Program Hacker1001 = Bug Reporter BugAdmin = Program Admin BugMember = Team Member associated ProgramManagement Group ProgramManagement Group = Custom Group created with "Program Management Permission" Steps: 1. Hacker1001 reports a Bug to...

CVE-2005-2187

CVE-2005-2187 affects McAfee IntruShield Security Management System. The issue allows remote authenticated users to access the Generate Reports feature and modify alerts by setting the Access option to true, demonstrated via (1) fullAccess or (2) fullAccessRight in reports-column-center.jsp, or (...