Lucene search
+L

266357 matches found

NVD
NVD
•added 2026/06/09 9:16 a.m.•31 views

CVE-2026-25699

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...

6.1CVSS0.00573EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/09 7:33 a.m.•16 views

CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...

5.8AI score0.00573EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/09 7:33 a.m.•61 views

CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...

0.00573EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/09 7:33 a.m.•104 views

CVE-2026-25699

The Apache Answer software (versions through 2.0.0 ) is vulnerable to an Exposure of Private Personal Information to an unauthorized actor. The root cause is a lack of proper authorization checks in timeline-related APIs , which permits regular authenticated users to access deleted, private, or u...

6.1CVSS5.8AI score0.00573EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/06/09 7:33 a.m.•16 views

CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...

6.1CVSS5.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•0 views

CVE-2026-25699: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...

6.1CVSS5.8AI score0.00573EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•31 views

Apache Answer 安全漏洞

Apache Answer is a community platform of the Apache Foundation in the United States. Versions of Apache Answer 2.0.0 and earlier contained security vulnerabilities. These vulnerabilities stemmed from insufficient authorization checks for time-line-related APIs, which could allow ordinary...

6.1CVSS5.9AI score0.00573EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•37 views

PT-2026-47713

Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.1 Description Timeline-related APIs lack proper authorization checks, which allows authenticated users to access content that is private, deleted, or unapproved, as well as its associated revision history...

6.1CVSS5.8AI score0.00573EPSS
SaveExploits0References6
Wired Threat Level
Wired Threat Level
•added 2026/06/08 6:00 a.m.•35 views

All the Ways Europe Is Ditching American Technology

A WIRED timeline shows how dozens of governments, companies, and other organizations across Europe are moving, or planning to shift, away from US Big Tech...

5.5AI score
SaveExploits0
Circl
Circl
•added 2026/06/08 5:35 a.m.•21 views

CVE-2026-11476

creationtimestamp| type| source ---|---|--- 2026-06-08 05:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqxjlapfc2f...

6.5CVSS6.5AI score0.00209EPSS
SaveExploits0References1
Circl
Circl
•added 2026/06/06 8:40 a.m.•26 views

CVE-2026-8611

creationtimestamp| type| source ---|---|--- 2026-06-06 08:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmawrkz5b2d 2026-06-12 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3wj3n4xi26...

4.3CVSS5AI score0.00387EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:32 p.m.•20 views

CVE-2026-6551

The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks block in all versions up to, and including, 1.1.10 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References1
Circl
Circl
•added 2026/06/05 2:54 a.m.•25 views

CVE-2026-11302

creationtimestamp| type| source ---|---|--- 2026-06-05 02:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj55gfvnf2h 2026-06-05 13:24:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

4.3CVSS5.3AI score0.00179EPSS
SaveExploits0References3
Circl
Circl
•added 2026/06/03 9:38 p.m.•18 views

CVE-2026-44682

creationtimestamp| type| source ---|---|--- 2026-06-03 21:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng2zcb7rm2s...

7.3CVSS7.2AI score0.00155EPSS
SaveExploits0References1
Circl
Circl
•added 2026/06/02 1:13 p.m.•18 views

CVE-2025-58024

creationtimestamp| type| source ---|---|--- 2026-06-02 13:13:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncodowlfp2f 2026-06-04 08:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5tinftn2v...

7.5CVSS5.8AI score0.003EPSS
SaveExploits0References2
Circl
Circl
•added 2026/06/02 1:10 p.m.•20 views

CVE-2025-53440

creationtimestamp| type| source ---|---|--- 2026-06-02 13:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnco77fw722s 2026-06-03 07:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnejxj2l6m22 2026-06-03 11:39:39+00:00| seen|...

8.1CVSS5.8AI score0.00415EPSS
SaveExploits0References3
Circl
Circl
•added 2026/05/31 12:14 p.m.•27 views

CVE-2026-40963

creationtimestamp| type| source ---|---|--- 2026-05-31 12:14:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5k45qeba2b...

3.1CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Circl
Circl
•added 2026/05/29 9:34 p.m.•20 views

CVE-2026-46527

creationtimestamp| type| source ---|---|--- 2026-05-29 21:34:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzihovmfd2m...

8.7CVSS5.8AI score0.00486EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/05/28 10:34 a.m.•181 views

Exploit for Missing Release of Memory after Effective Lifetime in Arm 5Th_Gen_Gpu_Architecture_Kernel_Driver

CVE-2023-26083 – Mali GPU Kernel Address Leak via Timeline Str...

3.3CVSS6.9AI score0.01218EPSS
SaveExploits1
Circl
Circl
•added 2026/05/28 7:53 a.m.•15 views

CVE-2026-9803

creationtimestamp| type| source ---|---|--- 2026-05-28 07:53:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvk5sxddj2t 2026-09-29 12:47:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

5.3CVSS5.8AI score0.00718EPSS
SaveExploits0References2
Rows per page
Query Builder