112132 matches found
CVE-2026-18047
A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass the Tomcat authentication constraint while RESTEasy still...
CVE-2026-65882 Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1
Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...
CVE-2026-65882
Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...
CVE-2026-65882
CVE-2026-65882 affects the Joomla Extension joomdle.com, specifically Joomdle versions prior to 3.1.1. The vulnerability is a reflected XSS in the moodle wrapper endpoint, exploitable via the goto url parameter. The CVSS-based assessment in the documents shows Network attack vector, required user...
CVE-2026-65882 Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1
Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...
CVE-2026-11841
creationtimestamp| type| source ---|---|--- 2026-07-28 12:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfcaovmt2a 2026-07-28 15:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrppujw4pe2z...
CVE-2026-14167
creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:32:01+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcrz7cxf2p...
EUVD-2026-49731
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
CVE-2026-11756
creationtimestamp| type| source ---|---|--- 2026-07-28 08:30:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3mroyo3n2wp23 2026-07-28 14:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplxdruzy24...
CVE-2026-15136
creationtimestamp| type| source ---|---|--- 2026-07-28 08:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroy447cmm2s...
CVE-2026-65438
creationtimestamp| type| source ---|---|--- 2026-07-28 00:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5zt6dyj2i...
CVE-2026-65442
creationtimestamp| type| source ---|---|--- 2026-07-28 00:29:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5s5l3hl2s...
CVE-2026-65439
creationtimestamp| type| source ---|---|--- 2026-07-28 00:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5fhjm5z2g 2026-07-28 14:05:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrple3oeuj2z...
CVE-2026-55685
creationtimestamp| type| source ---|---|--- 2026-07-28 00:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4sldjp72o 2026-08-05 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mse7x4p7ls2y 2026-08-05 19:07:07+00:00| seen|...
CVE-2026-65437
creationtimestamp| type| source ---|---|--- 2026-07-28 00:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4oqccbi27...
Linux Distros Unpatched Vulnerability : CVE-2026-45623
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prio...
ROS-20260728-73-0010
The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...
PT-2026-65626
Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.1.5 Description The sendFile function in the httpserver/handler.go file incorrectly derives the authorization filename from the raw req.URL.Path while opening the file using a cleaned path. This discrepancy allows an...
EUVD-2026-49865
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-controlled query string into a path buffer, then invokes urlencode without validating the final string...