59110 matches found
CVE-2026-3951
creationtimestamp| type| source ---|---|--- 2026-03-11 19:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3951...
CVE-2026-31863
creationtimestamp| type| source ---|---|--- 2026-03-11 18:10:06+00:00| seen| https://gist.github.com/alon710/2f5ac9f201724311bd0bb59616acb73c...
GHSA-VV3H-7QWR-722V
creationtimestamp| type| source ---|---|--- 2026-03-11 18:10:06+00:00| seen| https://gist.github.com/alon710/2f5ac9f201724311bd0bb59616acb73c...
CVE-2026-20162
In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a malicious payload when creating a Vie...
CVE-2026-20162
In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a malicious payload when creating a Vie...
CVE-2026-20162
Summary: CVE-2026-20162 is a Stored XSS in Splunk Enterprise before versions 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform before 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123. A low-privileged user can abuse the View creation endpoint (/manager/launcher/data/ui/views/_n...
CVE-2026-20162 Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise
In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a malicious payload when creating a Vie...
UBUNTU-CVE-2026-1663
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group import permissions to create labels in private projects due to improper authorization validation in th...
CVE-2026-1663 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group import permissions to create labels in private projects due to improper authorization validation in th...
BIT-PARSE-2026-30228 Parse Server: File creation and deletion bypasses `readOnlyMasterKey` write restriction
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.5 and 9.5.0, the readOnlyMasterKey can be used to create and delete files via the Files API POST /files/:filename, DELETE /files/:filename. This bypasses the read-only...
CVE-2026-32060
creationtimestamp| type| source ---|---|--- 2026-03-11 15:08:15+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116211167059630084...
Exploit for Improper Authentication in Controlid Idsecure
CVE-2023-6329 — Control iD iDSecure Authentication Bypass !P...
EUVD-2026-11134
WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature block-level collaboration annotations was introduced in WordPress 6.9 to allow editorial comments directly on posts in the block editor. However, the REST API createitempermissionscheck method in...
CVE-2026-24017
creationtimestamp| type| source ---|---|--- 2026-03-11 10:50:56+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-fortinet-8 2026-03-11 14:43:25+00:00| seen| https://ccb.belgium.be/advisories/warning-fortinet-patched-22-vulnerabilities-multiple-products-patch-immediately...
DEBIAN-CVE-2026-3906
WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature block-level collaboration annotations was introduced in WordPress 6.9 to allow editorial comments directly on posts in the block editor. However, the REST API createitempermissionscheck method in...
GHSA-FVCW-9W9R-PXC7
creationtimestamp| type| source ---|---|--- 2026-03-11 08:10:05+00:00| seen| https://gist.github.com/alon710/1475f09f284d480dbb7f0348bae5ca9a...
CVE-2026-30920
OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled state and installationid values and updates Project.gitHubAppInstallationId with isRoot: true without validating that the caller is authorized for the...
GHSA-MHG6-2Q2V-9H2C
creationtimestamp| type| source ---|---|--- 2026-03-11 06:40:06+00:00| seen| https://gist.github.com/alon710/e6746ea37c744f27fa53aba7fbd358d4...
CVE-2026-31830
creationtimestamp| type| source ---|---|--- 2026-03-11 06:40:06+00:00| seen| https://gist.github.com/alon710/e6746ea37c744f27fa53aba7fbd358d4 2026-03-21 08:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhkksjq4ip22...