1689 matches found
PT-2026-45943
ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth e.g., 12072000 for 12 July 2000. The application does not require or prompt users to change the password upon first login. This behavior...
PT-2026-45211
The partitioned dag runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with global Asset:read permission could enumerate partition run state, schedule configuration, and asset wiring for Dags they were not authorized ...
CVE-2025-68822
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...
PT-2026-25156
In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment e.g., to be associated with an issue or a release...
Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Improper Restriction of XML External Entity Reference (CVE-2022-39135)
Summary IBM OpenPages for Cloud Pak for Data is Vulnerable to Apache Calcite Core 1.37.0 introduced the SQL operators vulnerable to a potential XML External Entity XXE attack. . These vulnerabilities were remediated. Vulnerability Details CVEID:CVE-2022-39135 DESCRIPTION: Apache Calcite 1.22.0...
PT-2026-24020
CVE-2025-55017: Apache IoTDB: Path Traversal https://t.co/dRIraLBMg2 CVE-2025-64152: Apache IoTDB: Path Traversal https://t.co/fiMsybbd3I Two notifications of vulnerabilities non-described in the exact same way, but with slightly different affected and fixed version ranges...
EUVD-2020-27654
Malware in sbrugna...
EUVD-2021-25982
Malware in sbrugna...
EUVD-2017-14566
Malware in sbrugna...
EUVD-2023-49850
Malicious code in bioql PyPI...
EUVD-2023-42470
Malicious code in bioql PyPI...
EUVD-2023-41991
Malicious code in bioql PyPI...
EUVD-2022-39570
Malicious code in bioql PyPI...
EUVD-2022-28597
Malicious code in bioql PyPI...
EUVD-2025-23715
Malicious code in bioql PyPI...
EUVD-2023-28806
Malicious code in bioql PyPI...
PT-2025-39744
CVE-2025-56714 Cloud-Classroom-PHP-1.0 CVE-2025-56713 Poc 2 - POST /classrooms/loginlin... https://t.co/Dx3zpMS4OH Vulnerability Notification: https://t.co/xhLrNnfyrO...
CVE-2016-5552 vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9...
CVE-2025-7971
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-29 2025-08-14 15:16:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115027775869988670...
Advisory ROSA-SA-2025-2923
software: util-linux 2.37.4 OS: ROSA-CHROME unaffected versions = util-linux-2.37.4-3 affected versions util-linux-2.37.4-3 CVE-ID: CVE-2024-28085 BDU-ID: 2024-02517 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the util-linux package of the Linux operating system is related to incorrect privile...