50824 matches found
CVE-2026-45275 Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to force the system to share a file with approvers. This results in an authorization bypass and...
CVE-2026-45275
CVE-2026-45275 affects Nextcloud with the Approval app prior to version 2.7.2. A privilege-escalation flaw allows a user who lacks sharing permissions to trigger the system to share a file with approvers, resulting in an authorization bypass and potential unauthorized distribution of restricted f...
CVE-2026-9330
creationtimestamp| type| source ---|---|--- 2026-06-01 16:50:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mnajyao5gy26 2026-06-01 19:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatq63y672c 2026-06-04 20:35:04+00:00| seen|...
CVE-2026-9311
creationtimestamp| type| source ---|---|--- 2026-06-01 16:50:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mnajyao5gy26 2026-06-01 19:38:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatesuvou2c 2026-06-04 18:37:07+00:00| seen|...
CVE-2026-45267 Nextcloud: Missing permission check for from submissions
Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users. This issue has been patched in version 5.2.6...
CVE-2026-45267 Nextcloud: Missing permission check for from submissions
Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users. This issue has been patched in version 5.2.6...
CVE-2026-24087
creationtimestamp| type| source ---|---|--- 2026-06-01 16:14:39+00:00| seen| https://notnow.dev/objects/d63fe6f8-2c0f-4347-86b6-4c1e3e5b986e 2026-06-01 16:14:46+00:00| seen| https://bsky.app/profile/zhuowei.notnow.dev/post/3mnahz4yxic2k 2026-07-16 04:46:00+00:00| seen|...
EUVD-2026-33664
Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6...
CVE-2026-7465
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...
OPENSUSE-SU-2026:20854-1 Security update for rqlite
This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.2.0: Support verifying mTLS peer Common Name Console supports restore from SQLite data Console "count rows" respects current Tables Expand/Collapse state Console supports dropping indexes Further Console...
CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
UBUNTU-CVE-2025-55664
A heap buffer overflow in the m2tsdmxsendpacket function filters/dmxm2ts.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
SUSE-SU-2026:21946-1 Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-4271: use-after-free in the HTTP/2 server when user signal handlers disconnect connections during callback execution bsc1259767...
CVE-2026-7858
creationtimestamp| type| source ---|---|--- 2026-06-01 12:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna3qiivt22p 2026-06-01 14:05:55+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnaasqd4ld2y...
php:8.2 security update
An update is available for module.libzip, php-pear, libzip, php, php-pecl-rrd, module.php, module.php-pecl-xdebug3, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-rrd, php-pecl-zip, module.php-pecl-zip, module.php-pear, php-pecl-apcu. This update affects Rocky Linux 8. A Common...
Advisory ROSA-SA-2026-3306
Component: PHP 7.4.33 OS: ROSA-CHROME Affected versions: = php-7.4.33-13 Affected versions: php-7.4.33-13 CVE-ID: CVE-2024-5458 BDU-ID: 2024-04846 CVE-Crit: Medium CVE-DESCRIPTION: The vulnerability in the filtervar function of the PHP interpreter involves insufficient validation of data...
BIT-AUTHENTIK-2026-40166 authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/
authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0 through 2026.2.2, authenticated non-admin users with at least one OAuth2 access token can retrieve the clientsecret of confidential OAuth2 providers they have previously authenticated against, exposing...
SUSE-SU-2026:21964-1 Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy bsc1261845. - CVE-2026-31406: xfrm: Fix work re-schedule after cancel in...
Exposure of Sensitive Information Through Metadata
Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata in the BrokerInfo component. An attacker can obtain sensitive metadata, including client...