116574 matches found
EUVD-2026-36096
Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook...
Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook
Summary A Fission Function spec carries three reference types — Secret, ConfigMap, and Package. The first two were namespace-validated by the admission webhook; PackageRef.Namespace was not. Details A tenant with functions.fission.io/create in their own namespace could set...
CVE-2026-58371
creationtimestamp| type| source ---|---|--- 2026-06-30 18:14:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjm7xuynj24 2026-07-02 05:52:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndoycmhy2i...
CVE-2026-8864
creationtimestamp| type| source ---|---|--- 2026-06-30 18:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjm2lvbnn2u...
CVE-2026-10654
creationtimestamp| type| source ---|---|--- 2026-06-30 18:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlvpiomc2p...
CVE-2026-58369
creationtimestamp| type| source ---|---|--- 2026-06-30 18:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlra3qxv2d 2026-07-02 05:55:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndu7ch5u2t...
CVE-2026-58174
creationtimestamp| type| source ---|---|--- 2026-06-30 18:03:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjln3piyx2z 2026-07-02 06:06:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnei2e2a52k...
CVE-2026-10653
creationtimestamp| type| source ---|---|--- 2026-06-30 18:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjljaqkzx2z...
CVE-2026-58377
creationtimestamp| type| source ---|---|--- 2026-06-30 17:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlfnxyxp2d 2026-07-02 05:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2y63yj22...
CVE-2026-58176
creationtimestamp| type| source ---|---|--- 2026-06-30 17:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlccebvu23...
CVE-2026-58171
creationtimestamp| type| source ---|---|--- 2026-06-30 17:52:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjkzcp3tf2u 2026-07-02 05:55:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndtlgxfx26...
CVE-2026-49451
creationtimestamp| type| source ---|---|--- 2026-06-30 17:51:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjkwmjvtu2m 2026-07-01 22:04:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116846983714704954 2026-07-03 10:10:00+00:00| seen|...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the POST /api/n9e/datasource/list route, which lacks proper authorization checks. An attacker can obtain sensitive credentials, such as database passwords, HTTP bearer tokens, and mTLS client keys, by sending...
CVE-2026-12349
creationtimestamp| type| source ---|---|--- 2026-06-30 17:17:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjizi73cq2c...
CVE-2026-58375
JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips all authentication and authorization, and the export service streams the rendered report for any supplied report id...
CVE-2026-48286
creationtimestamp| type| source ---|---|--- 2026-06-30 17:02:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji6wod572y 2026-07-01 11:45:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mplgwhlm3fm2 2026-07-...
CVE-2026-11769
creationtimestamp| type| source ---|---|--- 2026-06-30 16:58:12+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpjhxiyrvj2p...
CVE-2025-23350
creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-02 02:18:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxplqz6q2b 2026-07-02 08:11:34+00:00| seen|...
CVE-2026-24270
creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-01 15:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpluoza7dy2v 2026-07-02 02:50:50+00:00| seen|...