59152 matches found
CVE-2026-27112
CVE-2026-27112 affects Kargo’s batch resource creation endpoints (legacy gRPC and newer REST API). In versions 1.7.0–before 1.7.8, 1.8.11, and 1.9.3, the endpoints accept multi-document YAML payloads and contain a logic bug that can inject arbitrary resources into the underlying Kubernetes namesp...
CVE-2026-27112 Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints
Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted payloads can manifest a bug present in...
CVE-2026-27482
creationtimestamp| type| source ---|---|--- 2026-02-20 17:45:59+00:00| published-proof-of-concept| https://github.com/ray-project/ray/security/advisories/GHSA-q5fh-2hc8-f6rq 2026-02-21 09:40:40+00:00| seen| https://gist.github.com/alon710/d7954c7332e01cf40fa1ed726cd8c207...
CVE-2026-2885
creationtimestamp| type| source ---|---|--- 2026-02-20 17:35:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116104163122684263 2026-02-21 21:19:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mffkf3kxom2k 2026-02-21 21:19:33+00:00| seen|...
K000160103: PostgreSQL vulnerability CVE-2022-2625
Security Advisory Description A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait...
CVE-2025-38383
creationtimestamp| type| source ---|---|--- 2026-02-20 14:25:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfccsjc2s322...
CVE-2019-25354
creationtimestamp| type| source ---|---|--- 2026-02-20 13:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfcabnyf2y2u...
GHSA-8QM3-746X-R74R
creationtimestamp| type| source ---|---|--- 2026-02-20 11:40:40+00:00| seen| https://gist.github.com/alon710/913d04fda246fea5d28eaa02383d9238...
CVE-2026-2855
creationtimestamp| type| source ---|---|--- 2026-02-20 10:50:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116102570574864032 2026-02-20 21:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcyxdmzvk2k 2026-02-24 05:20:10+00:00| seen|...
CVE-2026-2668
creationtimestamp| type| source ---|---|--- 2026-02-20 05:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbfhgji6n2x...
CVE-2026-2689
creationtimestamp| type| source ---|---|--- 2026-02-20 04:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbayertpa2u...
CVE-2019-25352
creationtimestamp| type| source ---|---|--- 2026-02-20 01:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfay2b7pxj2e...
CVE-2026-23549
creationtimestamp| type| source ---|---|--- 2026-02-20 01:31:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaxlkdbma2s...
CVE-2025-67304
In Ruckus Network Director RND 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate...
CVE-2026-26316
creationtimestamp| type| source ---|---|--- 2026-02-20 00:05:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfasrkbige2v 2026-02-20 02:53:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfb453gvkp27 2026-02-24 21:40:09+00:00| seen|...
CVE-2026-26959
creationtimestamp| type| source ---|---|--- 2026-02-20 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfasihmrx622 2026-02-20 00:00:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/116100015280543549 2026-02-20 00:19:46+00:00| seen|...
The vulnerability of the `smf_gn_handle_create_pdp_context_request` function in the `/src/smf/gn-handler.c` file, which is used for creating and managing NR/LTE Open5GS mobile networks. This vulnerability allows a attacker to cause a service failure.
The vulnerability of the smfgnhandlecreatepdpcontextrequest function in the /src/smf/gn-handler.c file, which is used for creating and managing NR/LTE Open5GS mobile networks, is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause...
PT-2026-21318
OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the name parameter. Attackers can send POST requests to the document endpoint with JavaScript code in the name field to...
GHSA-VRHM-GVG7-FPCF
creationtimestamp| type| source ---|---|--- 2026-02-19 22:10:39+00:00| seen| https://gist.github.com/alon710/bdb71500cdcbca966a4ff1f078991fa5 2026-02-19 22:40:03+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfany5xe432p...