501 matches found
CVE-2026-64185
In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategroup calls kernfsremovekn on the group directory. In the update path, k...
CVE-2026-64185 sysfs: don't remove existing directory on update failure
In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategroup calls kernfsremovekn on the group directory. In the update path, k...
CVE-2026-64185
In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategroup calls kernfsremovekn on the group directory. In the update path, k...
CVE-2026-64185 sysfs: don't remove existing directory on update failure
In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategroup calls kernfsremovekn on the group directory. In the update path, k...
PT-2026-61502
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sysfs component where the internal create group function incorrectly calls kernfs removekn on a group directory when create files fails for example, due to -ENOMEM...
CVE-2026-12869
creationtimestamp| type| source ---|---|--- 2026-07-16 08:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrh4tb4c2c...
CVE-2026-61440
CVE-2026-61440 affects the PraisonAI Platform prior to 0.1.9. The issue is an authorization flaw in label and issue-label mutations that lets workspace members with basic privileges rename and recolor shared labels and add/remove labels on owner-created issues. The root cause is improper authoriz...
CVE-2026-61442
PraisonAI Platform praisonai-platform before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspace-member role. A workspace member can modify owner-created records; for projects, a member can reassign leadid to their ow...
PT-2026-57438
Name of the Vulnerable Software and Affected Versions PraisonAI Platform versions prior to 0.1.9 Description The platform fails to enforce owner or administrator authorization on the PATCH routes for projects, issues, and agents, requiring only the workspace-member role. This allows a user with l...
CVE-2026-55475 Snipe-IT: Import created_by can be overwritten
Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the createdby value of an import file, allowing unauthorized modification of import ownership metadata. This issue is fixed in...
CVE-2026-55475 Snipe-IT: Import created_by can be overwritten
Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the createdby value of an import file, allowing unauthorized modification of import ownership metadata. This issue is fixed in...
CVE-2026-55475
Snipe-IT prior to version 8.6.1 is vulnerable via the Importer API endpoint where a user with CSV import capabilities and a valid API key can overwrite the created_by value of an import file, enabling unauthorized modification of import ownership metadata. The issue is fixed in version 8.6.1. Thi...
CVE-2026-55475
Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the createdby value of an import file, allowing unauthorized modification of import ownership metadata. This issue is fixed in...
CVE-2026-61441 PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies
PraisonAI Platform praisonai-platform before 0.1.9 improperly authorizes deletion of issue dependencies. The DELETE dependency route accepts either endpoint of a dependency edge and checks delete permission only against the caller-selected URL issue. A workspace member who cannot delete a...
PT-2026-57288
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.1 Description The Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the created by value of an import file. This leads to the unauthorized modification of import...
EDB-48857
creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08fec6cd-60db-48e0-adee-f94db4ca16e6...
EDB-28713
creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/929c0d80-34e5-4a6d-9986-b1e2d37eaa30...
GO-2026-5727 Mattermost doesn't prevent disclosure of created user password in github.com/mattermost/mattermost-server
Mattermost doesn't prevent disclosure of created user password in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
MAL-2026-6455 Malicious code in simple-node-calc-ccc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bfe35484999f40374a6dcfea11247cf3407a3177e27506c714407b9384036a Package name 'simple-node-calc-ccc' presents as a trivial calculator but ships lodash-compiler.js, an 87KB obfuscator.io-packed file using rotating...