Lucene search
K

8 matches found

OSV
OSV
added 4 days ago3 views

GHSA-G5VC-Q7QC-V939 Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

Description Bugsink’s issue list supports bulk actions such as resolving or muting selected issues. In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to...

3.1CVSS5.4AI score0.00029EPSS
Exploits0References4
OSV
OSV
added 2026/05/28 2:2 p.m.3 views

CLSA-2026-1779968889 Fix of 7 CVEs

SECURITY UPDATE: Authentication Bypass in digest authentication - debian/patches/CVE-2026-43512.patch: reject digest authentication attempts for unknown users in getDigest - CVE-2026-43512 SECURITY UPDATE: Account lockout bypass in LockOutRealm via case variation of user names -...

9.8CVSS5.8AI score0.00139EPSS
Exploits1References1
NVD
NVD
added 2025/11/04 11:15 a.m.1 views

CVE-2025-11690

An Insecure Direct Object Reference IDOR vulnerability exists in the vehicleId parameter, allowing unauthorized access to sensitive information of other users’ vehicles. Exploiting this issue enables an attacker to retrieve data such as GPS coordinates, encryption keys, initialization vectors,...

8.5CVSS0.00035EPSS
Exploits0References2
OSV
OSV
added 2023/03/02 8:32 a.m.6 views

SUSE-SU-2023:0592-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: cobbler: - Fix improper authorization bsc1197027, CVE-2022-0860 - Prevent error when starting up logrotate.service bsc1188191 drools: - Deserialization of Untrusted Data: unsafe data deserialization in DroolsStreamUtils.java bsc1204879, CVE-2022-1415...

9.8CVSS8.7AI score0.09042EPSS
Exploits3References63
OpenVAS
OpenVAS
added 2022/05/27 12:0 a.m.9 views

Slackware: Security Advisory (SSA:2022-146-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7AI score0.00037EPSS
Exploits0References2
Cent OS
Cent OS
added 2020/04/08 7:7 p.m.155 views

polkit security update

CentOS Errata and Security Advisory CESA-2020:1135 An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

4.7CVSS6AI score0.00069EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2020/03/31 7:53 p.m.108 views

Low: Red Hat Security Advisory: polkit security and bug fix update

An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

4.7CVSS6.1AI score0.00069EPSS
Exploits0References4
OSV
OSV
added 2018/08/10 9:36 a.m.9 views

SUSE-SU-2018:2299-1 Security update for ceph

This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-10861: Fix ceph-mon authorization on OSD pool ops bsc1099162. - CVE-2018-1128: Fix cephx signature check bypass bsc1096748. - CVE-2018-1129: Fix cephx protocol vulnerability to replay attack bsc1096748. -...

8.1CVSS7.4AI score0.01536EPSS
Exploits0References11
Rows per page
Query Builder