19289 matches found
CVE-2011-2995
creationtimestamp| type| source ---|---|--- 2026-06-19 13:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monfw6fzkk2k...
CGA-53M9-3684-7C8M
Bulletin has no description...
CVE-2026-50195
creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-06-19 09:11:46+00:00| seen| https://bsky.app/profile/canartuc.com/post/3momyrcpuo42y 2026-06-19 10:03:46+00:00| seen|...
CVE-2026-49454
creationtimestamp| type| source ---|---|--- 2026-06-19 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774182978943000 2026-06-19 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mom6ygyknu2x...
PT-2026-50937
Name of the Vulnerable Software and Affected Versions Joomla! Component Price Alert version 3.0.2 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. By sending requests to the 'subscribeajax' view with crafted payloads in the product id parameter,...
CVE-2017-20260: Improper Neutralization of Special Elements used in an SQL Command
Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the productid parameter. Attackers can send requests to the subscribeajax view with crafted SQL payloads in the...
CVE-2026-54223
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 16:08:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol7lg5tfb27...
Malicious Package
Overview postinstall-logger-7x9z is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
PT-2026-50681
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves external $ref URLs and fetchRemoteSchemaDocument uses isHttpUrl to fetch any http or https target without private IP,...
CVE-2024-32729
creationtimestamp| type| source ---|---|--- 2026-06-17 22:54:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mojfsymzri2g...
CVE-2026-20178
creationtimestamp| type| source ---|---|--- 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928...
EUVD-2026-37584
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...
Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...
GHSA-694G-J8PJ-CJJ5 Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...
CVE-2026-54803
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.4 versions...
CVE-2026-47340
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the alert instances. An attacker can gain unauthorized access to sensitive alert information by exploiting insufficient authorization checks. Remediation Upgrade org.apache.dolphinscheduler:dolphinscheduler-ap...
CVE-2026-54803
CVE-2026-54803 affects the WordPress plugin SMS Alert Order Notifications up to version 3.9.4, with a subscriber privilege escalation vulnerability. Documents confirm affected product (WordPress plugin), vulnerable component (the plugin’s order notifications), and impact (privilege escalation for...
