58899 matches found
GHSA-4XGF-CPJX-PC3J
creationtimestamp| type| source ---|---|--- 2026-06-20 14:29:23+00:00| seen| https://gist.github.com/konard/4b48b247d88d1fe3f1e7f6cd34987449...
CVE-2026-48909
creationtimestamp| type| source ---|---|--- 2026-06-20 13:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mopyrpawac2a 2026-06-21 03:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3morex5l44o2t 2026-06-21 03:00:34+00:00| seen|...
CVE-2026-48939
creationtimestamp| type| source ---|---|--- 2026-06-20 13:44:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mopyiqfnx42t 2026-06-21 01:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mor7wauvu62f 2026-06-21 01:30:29+00:00| seen|...
CVE-2026-12119
The CVE concerns the Simple File List WordPress plugin (≤6.3.7). A missing authorization check on the frontmanage shortcode attribute allows authenticated users with contributor-level access or higher to perform arbitrary file operations (delete, move, folder creation, download). The vulnerabilit...
CVE-2007-1778
creationtimestamp| type| source ---|---|--- 2026-06-20 03:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moouu7vmux26...
CVE-2006-7183
creationtimestamp| type| source ---|---|--- 2026-06-20 01:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooo5n3upo2j...
CVE-2026-56216 Capgo - Scope Escalation via API Key Creation in /functions/v1/apikey
Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey endpoint that allows app-limited API keys to mint unrestricted keys by setting empty limits. Attackers with a compromised app-limited key can create an unrestricted key with org-wide access to resourc...
CVE-2026-56216
Capgo before 12.128.2 is vulnerable to a scope escalation in POST /functions/v1/apikey where app-limited API keys can mint unrestricted keys by sending empty limits. An compromised app-limited key can create an org-wide, unrestricted key accessing resources such as app listings and protected endp...
CVE-2026-45480
creationtimestamp| type| source ---|---|--- 2026-06-19 22:51:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mooglnzo6y2e 2026-06-20 05:49:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116780864325937512 2026-06-21 23:40:09+00:00| seen|...
CVE-2026-48584
creationtimestamp| type| source ---|---|--- 2026-06-19 22:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moofhtv2b42q 2026-06-22 00:36:50+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnfcrouu2v 2026-06-22 09:01:14+00:00| seen|...
CVE-2026-48774
creationtimestamp| type| source ---|---|--- 2026-06-19 22:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodtrcp2c2g...
CVE-2026-49345
creationtimestamp| type| source ---|---|--- 2026-06-19 22:00:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodq6gmp52g...
CVE-2026-49295
creationtimestamp| type| source ---|---|--- 2026-06-19 21:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodmsmybf2i...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization in the authorization process for public assets. An attacker can perform unauthorized actions such as creating, updating, reapplying, and deleting VEX rules, as well as making changes to vulnerability-triage...
CVE-2026-48089
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can create,...
CVE-2026-48089 DevGuard has improper authorization on public assets
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can create,...
CVE-2008-6554
creationtimestamp| type| source ---|---|--- 2026-06-19 19:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monzzw6ltg2e...
CVE-2026-56209
creationtimestamp| type| source ---|---|--- 2026-06-19 18:34:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mony7lyhgq2h...
CVE-2026-12238 WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation
The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.1.01. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers ...