1629 matches found
CVE-2026-39373
creationtimestamp| type| source ---|---|--- 2026-04-08 00:16:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-fjrm-76x2-c4q4...
GHSA-X8RX-789C-2PXQ
creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...
GHSA-66FC-V5XJ-X859
creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks...
GHSA-VPWC-V33Q-MQ89
creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:43+00:00| seen| Telegram/7stdzVfIjMVb7tvEQLoql-CFRLg5JIYu0eUqsXCfmQ30DI4...
GHSA-CJ63-JHHR-WCXV vulnerabilities
Vulnerabilities for packages: wazuh-dashboard...
GHSA-C427-H43C-VF67 vulnerabilities
Vulnerabilities for packages: airflow, dask-kubernetes, kubeflow-pipelines-visualization-server, open-webui, py3-cassandra-medusa, checkov, kserve...
GHSA-2WVG-62QM-GJ33
creationtimestamp| type| source ---|---|--- 2026-04-06 21:21:26+00:00| published-proof-of-concept| Telegram/xKxKUYX0BRejEqYlrURXsjCQY9BctYcoeewNmSMWqY7riM...
GHSA-RRVG-CXH4-QHRV vulnerabilities
Vulnerabilities for packages: py3-oauthenticator...
GHSA-QV7J-4883-HWH7 vulnerabilities
Vulnerabilities for packages: ruby3.3-rack, gitlab-rails-ce, ruby3.4-rack, ruby3.4-rails, ruby4.0-rack, gitlab-rails-ce-fips, kube-fluentd-operator, pact-broker-docker-fips, ruby3.2-rails, gitlab-cng, logstash, pact-broker-docker, ruby3.2-rack...
GHSA-9WFR-W7MM-PC7F
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA...
GHSA-RWW4-4W9C-7733
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-GJW9-34GF-RP6M
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-MV6H-V3JG-G539
creationtimestamp| type| source ---|---|--- 2026-04-02 19:26:58+00:00| published-proof-of-concept| Telegram/7DVhAvDfvaCSFfrp-315YEAfd2kaZp9OZJgmE0wwvo2i8o...
CVE-2026-35452
creationtimestamp| type| source ---|---|--- 2026-04-02 18:01:54+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-99j6-hj87-6fcf...
CVE-2026-35448
creationtimestamp| type| source ---|---|--- 2026-04-02 17:52:54+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-3v7m-qg4x-58h9...
Improper Authorization
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Improper Authorization in the overrideStatus request parameter, which is processed by the setStatus function. An attacker can bypass administrative moderation and...
GHSA-QC22-XMQ4-QG46 c2cciutils affected by CVE-2022-40896
Pinned vulnerable version of Pygment CVE-2022-40896...
CVE-2026-35179
creationtimestamp| type| source ---|---|--- 2026-04-01 18:48:36+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-x9w5-xccw-5h9w...
Arbitrary Code Injection
Overview org.webjars.npm:lodash is a modern JavaScript utility library delivering modularity, performance, & extras. Affected versions of this package are vulnerable to Arbitrary Code Injection due the improper validation of options.imports key names in .template. An attacker can execute arbitrar...