498766 matches found
EUVD-2026-56005
A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication or authorization checks before creating a...
CVE-2026-72535
A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication or authorization checks before creating a...
CVE-2026-72535 Chaskiq Chaskiq - Missing Authentication
A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication or authorization checks before creating a...
CVE-2026-72535
CVE-2026-72535 affects Chaskiq. A missing authentication flaw (through commit 46dfdd1) allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication/authorization checks before c...
Secrets Disclosure
Apache Airflow is vulnerable to Secrets Disclosure. The vulnerability is due to the AWS Systems Manager Parameter Store and Secrets Manager backends resolving a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed, where a caller in one team...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...
pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...
CVE-2026-73162
Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: /account/follow /account/deletenotification /account/marknotificationread /account/markallread These endpoints require authentication, but before the fix they could be invoked with simple GET...
RHSA-2026:53298 Red Hat Security Advisory: nodejs22 security update
Bulletin has no description...
RHSA-2026:53364 Red Hat Security Advisory: resource-agents security update
Bulletin has no description...
RHSA-2026:52990 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:52949 Red Hat Security Advisory: java-1.8.0-ibm security update
Bulletin has no description...
RHSA-2026:52948 Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update
Bulletin has no description...
RHSA-2026:52841 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
RHSA-2026:52833 Red Hat Security Advisory: RHELAI 3.2 Backport fixes for CVE-2026-64835 and CVE-2026-58049
Bulletin has no description...
RHSA-2026:52832 Red Hat Security Advisory: RHELAI 3.0 Backport fixes for CVE-2026-64835 and CVE-2026-58049
Bulletin has no description...
RHSA-2026:52772 Red Hat Security Advisory: perl-DBI:1.641 security update
Bulletin has no description...
RHSA-2026:47614 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
Origin Validation Error
Overview typo3/cms-install is a TYPO3 extension install. The Install Tool is used for installation, upgrade, system administration and setup tasks. Affected versions of this package are vulnerable to Origin Validation Error via referrer enforcement in the ReferrerEnforcer code used by the backend...