27488 matches found
CVE-2018-25188
creationtimestamp| type| source ---|---|--- 2026-03-06 14:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfid75x6u24...
CVE-2018-25189
creationtimestamp| type| source ---|---|--- 2026-03-06 13:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhlde5ii2e...
CVE-2026-30885
creationtimestamp| type| source ---|---|--- 2026-03-06 13:27:33+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-6w2r-cfpc-23r5...
CVE-2026-29059
creationtimestamp| type| source ---|---|--- 2026-03-06 13:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgfffrkmn22w 2026-04-14 20:03:14+00:00| published-proof-of-concept| Telegram/P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY 2026-06-03 04:09:58+00:00| confirmed|...
CVE-2026-23097
creationtimestamp| type| source ---|---|--- 2026-03-06 13:10:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgff4w63em24 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-03-20 13:05:29+00:00| seen|...
CVE-2025-11792
creationtimestamp| type| source ---|---|--- 2026-03-06 13:03:05+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-acronis...
CVE-2026-27417
Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through 4.0.1...
CVE-2026-28681
creationtimestamp| type| source ---|---|--- 2026-03-06 06:04:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgend7unkc2k 2026-03-06 08:07:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeu6w36ns2f 2026-03-06 08:09:25+00:00| seen|...
CVE-2026-2923
creationtimestamp| type| source ---|---|--- 2026-03-06 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-161/ 2026-03-16 15:47:07+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-gstreamer-patch-immediately 2026-03-18 04:40:09+00:00|...
CVE-2026-28719
creationtimestamp| type| source ---|---|--- 2026-03-06 04:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgehytuzzk2y...
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew MySQL, PostgreSQL. This allows...
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew MySQL, PostgreSQL. This allows...
CVE-2026-27005
Chartbrew prior to version 4.8.3 is vulnerable to unauthenticated SQL injection in queries executed against connected databases (MySQL, PostgreSQL). The root cause is arbitrary SQL being injected via user-supplied input in queries, potentially allowing reading, modification, or deletion of data d...
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew MySQL, PostgreSQL. This allows...
CVE-2026-29612
creationtimestamp| type| source ---|---|--- 2026-03-06 02:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgecfy77kd2n...
CVE-2026-3606
creationtimestamp| type| source ---|---|--- 2026-03-06 02:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgebu3eoty2u 2026-03-06 10:02:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116181652686663216...
CVE-2026-30859
creationtimestamp| type| source ---|---|--- 2026-03-06 02:37:28+00:00| published-proof-of-concept| https://github.com/Tencent/WeKnora/security/advisories/GHSA-2f4c-vrjq-rcgv 2026-03-07 16:15:53+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30859 2026-03-...
CVE-2026-28484
creationtimestamp| type| source ---|---|--- 2026-03-06 01:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7h76scz2u 2026-03-06 10:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf2judv3l2k 2026-03-06 10:01:31+00:00| seen|...
CVE-2026-26122
creationtimestamp| type| source ---|---|--- 2026-03-06 01:52:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7ayaqh52u 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:15:41+00:00| seen|...
PT-2026-23788
Flowise and Affected Versions Flowise versions prior to 3.0.13 Description Flowise is a drag & drop user interface to build a customized large language model flow. A mass assignment issue exists in the /api/v1/leads endpoint, allowing unauthenticated users to control internal entity fields id,...