24782 matches found
CVE-2026-42017
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-42017
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
EUVD-2026-49568
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-42017 Privilege escalation via JFrog Worker event token exposure
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-12383
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-12383
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-12383
The CVE-2026-12383 entry describes a flaw in the Event-Driven Ansible (EDA) server where ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny] , authentication_classes=[] ), relying solely on the Subject header for mTLS authentication and not validating that th...
EUVD-2026-49406
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-12383 Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-12383 Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-12383
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-66398
creationtimestamp| type| source ---|---|--- 2026-07-27 18:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyzne4w22 2026-07-30 04:56:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e...
CVE-2026-12394
creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7mmhgz24...
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65567
The vulnerability concerns the WordPress Event Tickets plugin for WordPress, affected in versions ≤ 5.29.0.1. It is described as an Unauthenticated Broken Access Control flaw, meaning unauthenticated users can access restricted functionality or data. The CVE-2026-65567 entry confirms the issue wi...
EUVD-2026-49238
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65567 WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...