CVE-2025-30042

The CVE-2025-30042 entry concerns the CGM CLININET system, where smart card authentication is effectively bypassed because access verification uses only the certificate number on the client, not the presence of a smart card or private key. This allows authentication if the certificate number is k...

CVE-2025-30035 Lack of API authentication allowing session generation for any user

The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without requiring a password or any other credentials. Obtaining a session ID is sufficient for session takeover and grants access to the...

CVE-2025-30035 Lack of API authentication allowing session generation for any user

The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without requiring a password or any other credentials. Obtaining a session ID is sufficient for session takeover and grants access to the...

CVE-2025-10350

creationtimestamp| type| source ---|---|--- 2026-03-02 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-10350/ 2026-03-02 11:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg36xw3hev2x...

CVE-2026-20428

creationtimestamp| type| source ---|---|--- 2026-03-02 09:20:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116158838343422570 2026-03-03 09:08:54+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6...

CVE-2024-27695

creationtimestamp| type| source ---|---|--- 2026-03-02 06:44:15+00:00| seen| https://gist.github.com/iamyourhang/a8dafcadc74cbd626822c18eeddf9c9f...

CVE-2026-3404

creationtimestamp| type| source ---|---|--- 2026-03-02 04:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2ey5iwcv2x...

CVE-2026-3407

creationtimestamp| type| source ---|---|--- 2026-03-02 03:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2egamv3g2u...

CVE-2026-27622

creationtimestamp| type| source ---|---|--- 2026-03-02 02:13:35+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-cr4v-6jm6-4963 2026-03-04 00:28:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6zn76wgr2o...

CVE-2026-3164

creationtimestamp| type| source ---|---|--- 2026-03-02 02:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg25teeoam2m...

CVE-2026-28787

creationtimestamp| type| source ---|---|--- 2026-03-01 19:54:22+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-gjjc-pcwp-c74m 2026-03-06 06:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgepedhs6y2v 2026-03-06 08:06:40+00:0...

CVE-2026-3399

creationtimestamp| type| source ---|---|--- 2026-03-01 06:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116152566505912744 2026-03-02 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116156991352747158 2026-03-02 01:30:32+00:00| seen|...

GHSA-HX9W-F2W9-9G96

creationtimestamp| type| source ---|---|--- 2026-03-01 06:10:21+00:00| seen| https://gist.github.com/alon710/8322ecdb223d4bba4354b16de7a125f9...

GHSA-6RXQ-Q92G-4RMF

creationtimestamp| type| source ---|---|--- 2026-03-01 05:40:22+00:00| seen| https://gist.github.com/alon710/7a893e251a88058a62af629d6e1695c0...

CVE-2026-28508

creationtimestamp| type| source ---|---|--- 2026-03-01 04:30:09+00:00| published-proof-of-concept| https://github.com/idno/idno/security/advisories/GHSA-fcrh-fqxh-6fx6 2026-03-06 05:51:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgemmi7vhp24...

GHSA-M3XH-9434-G336

creationtimestamp| type| source ---|---|--- 2026-03-01 03:31:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfxsh6sxfc2z...

GHSA-W878-F8C6-7R63

creationtimestamp| type| source ---|---|--- 2026-03-01 02:40:22+00:00| seen| https://gist.github.com/alon710/99efb0d74d514062b9d54ac7af70acf9...

CVE-2026-28424

creationtimestamp| type| source ---|---|--- 2026-03-01 02:40:22+00:00| seen| https://gist.github.com/alon710/99efb0d74d514062b9d54ac7af70acf9...

CVE-2026-27836

phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoint /api/webauthn/prepare creates new active user accounts without any authentication, CSRF protection, captcha, or configuration checks. This allows unauthenticated attackers to create unlimited us...

GHSA-XFX2-PRG5-JQ3G INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints

Impact An authorization bypass vulnerability was discovered in the administration pages of the tutoring application. When a standard user logged in but without administrator privileges attempts to access a resource under /api/admin/, the system detects the error but does not block the request. As...