58572 matches found
CVE-2025-62826
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...
CVE-2026-57831
creationtimestamp| type| source ---|---|--- 2026-07-15 13:10:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqos7umhar22 2026-07-15 13:22:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqosupkfli22...
CVE-2026-57833
creationtimestamp| type| source ---|---|--- 2026-07-15 13:07:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqos3mqkge2m 2026-07-15 13:15:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqosjcebj42o...
GHSA-Q6MX-QVHP-FQMG Duplicate Advisory: External Secrets Permission Bypass via Expression Parser Mismatch
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jp7m-xcgx-57qm. This link is maintained to preserve external references. Original Description n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets...
CVE-2026-61863
ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...
EUVD-2026-44612
ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...
CVE-2026-61863
ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...
CVE-2026-61863
ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...
CVE-2026-61863 ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder
ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...
CVE-2026-59259 n8n - Permission Bypass via Expression Parser Mismatch in External Secrets
n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caused by a mismatch between the static validation check and the runtime expression engine. An authenticated user with credential create or update permissions but without the...
CVE-2026-57996 phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint
phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in the user/add API endpoint that allows non-SuperAdmin administrators to create SuperAdmin accounts. A delegated administrator with USERADD/EDIT/DELETE permissions can call POST /admin/api/user/add with isSuperAdmin: true and...
CVE-2026-44021
creationtimestamp| type| source ---|---|--- 2026-07-15 10:30:04+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3mqojbaj2up2b 2026-08-03 10:30:05+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3ms6c4sohee2c...
CVE-2026-47992
creationtimestamp| type| source ---|---|--- 2026-07-15 10:18:35+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimquynu2z...
OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation
A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied projectid for an EC2-type credential was not validated against the project of the authenticating...
CVE-2026-42936
creationtimestamp| type| source ---|---|--- 2026-07-15 08:33:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqocr3ocif2c 2026-07-15 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN59875262...
CVE-2026-59839
creationtimestamp| type| source ---|---|--- 2026-07-15 07:22:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116922788149851186 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...
CVE-2026-12281
The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, treating any request that carries identity headers as an authenticated session without verifying them. On a deployment where untrusted client headers reach...
CVE-2026-12281 Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing
The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, treating any request that carries identity headers as an authenticated session without verifying them. On a deployment where untrusted client headers reach...
EUVD-2026-44594
The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, treating any request that carries identity headers as an authenticated session without verifying them. On a deployment where untrusted client headers reach...