323701 matches found
CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption
opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...
CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption
opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...
CVE-2026-74875 openssl_encrypt before 1.4.0 Schema Validation Bypass
opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...
CVE-2026-74869 stoatchat before 0.15.0 Missing Authorization via Subscribe
stoatchat before 0.15.0 contains a missing authorization vulnerability in the Subscribe message handler that allows authenticated attackers to enumerate members and monitor profile updates of private servers without membership. Attackers can subscribe to any server's member-update topic by sendin...
CVE-2026-74869
StoatChat before version 0.15.0 has a missing-authorization flaw in the Subscribe message handler: authenticated users can send a Subscribe message with any arbitrary server ID and receive live UserUpdate events (display names, avatars, status) for members of private servers they are not part of....
WordPress Pinpoint Booking System plugin <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter vulnerability
Unauthenticated Improper Input Validation to Price Manipulation via 'cartdata' Parameter vulnerability discovered by WordFence in WordPress Plugin Pinpoint Booking System versions = 2.9.9.6.8...
CVE-2025-10005
creationtimestamp| type| source ---|---|--- 2026-08-17 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mtbb65npy42s...
MINI-27M9-95WQ-5F7H
Bulletin has no description...
MINI-3HCH-JH76-JR65
Bulletin has no description...
MINI-QJX8-GFJ5-6729
Bulletin has no description...
MINI-5MX4-CGWH-J589
Bulletin has no description...
MINI-VPFX-9G3P-J4W3
Bulletin has no description...
MINI-5XRG-PFX6-3QQQ
Bulletin has no description...
MINI-RGRH-Q439-J3WV
Bulletin has no description...
MINI-Q97P-7R8M-562R
Bulletin has no description...
MINI-78V6-M6PR-82X8
Bulletin has no description...
MINI-8RWC-MPC5-VH33
Bulletin has no description...
MINI-XH34-53RP-9J9Q
Bulletin has no description...