62383 matches found
GHSA-G7MM-9VX7-JM7H
creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...
CVE-2026-50399
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:02+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...
CVE-2026-50405
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:12+00:00| seen|...
GHSA-P433-FP4G-PC2C
creationtimestamp| type| source ---|---|--- 2026-07-14 18:51:32+00:00| seen| https://gist.github.com/yuriw/cc567f8b243229aaf1def97d7207ea0d 2026-07-14 18:52:20+00:00| seen| https://gist.github.com/yuriw/be55c19caff2bacad733b7df0c67de08 2026-09-02 19:03:42+00:00| seen|...
CVE-2026-15747
creationtimestamp| type| source ---|---|--- 2026-07-14 17:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmquxixea2t 2026-07-15 17:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbfq4srt2w 2026-07-16 09:32:04+00:00| seen|...
CVE-2026-60082
creationtimestamp| type| source ---|---|--- 2026-07-14 17:01:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmongt66t2f 2026-07-15 15:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2lniocx2l 2026-07-16 09:32:03+00:00| seen|...
SQL Injection
Overview snowflake-sqlalchemy is a Snowflake SQLAlchemy Dialect Affected versions of this package are vulnerable to SQL Injection via improper handling of user-supplied input in merge operations and table creation queries. An attacker can execute unauthorized SQL commands or read arbitrary files ...
CVE-2026-11403
creationtimestamp| type| source ---|---|--- 2026-07-14 16:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmnoybfes27...
CVE-2026-15695
creationtimestamp| type| source ---|---|--- 2026-07-14 16:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmsddly72i 2026-07-22 05:04:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kduliog2u...
CVE-2026-60119
Hi.Events through v1.10.0-beta contains an XSS vulnerability in the event title handling. An authenticated user with event creation/edit privileges can inject HTML/JavaScript by placing a malicious title containing , which is not escaped by JSON.stringify when embedded in inline script data. This...
CVE-2026-60118 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint
Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidd...
CVE-2026-60118 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint
Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidd...
CVE-2026-60118
CVE-2026-60118 affects Hi.Events up to v1.10.0-beta, where a missing server-side visibility enforcement lets unauthenticated attackers purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hi...
CVE-2026-60118 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint
Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidd...
GHSA-8G6F-QW9X-4Q6Q Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities
Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...
CVE-2026-47871
creationtimestamp| type| source ---|---|--- 2026-07-14 15:09:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifhw5al2k 2026-07-17 16:15:16+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:38+00:00| seen|...
CVE-2026-63897
creationtimestamp| type| source ---|---|--- 2026-07-14 15:08:39+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmiehu3i722 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-15736
Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...
CVE-2026-62186
creationtimestamp| type| source ---|---|--- 2026-07-14 14:02:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqmeoeeuin2e 2026-07-14 14:02:51+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116918699311489381...