72197 matches found
CVE-2026-49163
CVE-2026-49163 concerns an improper limitation of a pathname to a restricted directory (path traversal) in Application Insights Profiler, enabling an authorized attacker to elevate privileges over the network. The entry specifies a CVSSv3.1 base score of 8.8 (High) with Network attack vector, Low...
CVE-2026-70636
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers...
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...
CVE-2026-50159
Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text c...
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...
CVE-2026-48077 OpenReception: GET appointment by ID returns full appointment record without authorization
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at /api/tenants/id/appointments/appointmentId performs no authorization check before returning the appointment record. Any party who knows or obtains...
CVE-2026-19166
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
GHSA-FG7F-2386-8897 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2025-49506
creationtimestamp| type| source ---|---|--- 2026-08-06 19:59:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/46253jene2lfd...
MINI-PM7G-6X34-X66X
Bulletin has no description...
CVE-2026-15235
creationtimestamp| type| source ---|---|--- 2026-08-06 19:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msgqufchaa2n...
CVE-2026-65600
creationtimestamp| type| source ---|---|--- 2026-08-06 18:31:30+00:00| seen| https://gist.github.com/alon710/1c8a7f596af5fdd35dfa04b0effb7a0b 2026-08-06 18:35:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cxjq-mrr5-89rv...
CVE-2026-64597
creationtimestamp| type| source ---|---|--- 2026-08-06 17:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049822231737257...
CVE-2026-64592
creationtimestamp| type| source ---|---|--- 2026-08-06 17:35:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049769070717664...
CVE-2026-34501
creationtimestamp| type| source ---|---|--- 2026-08-06 17:08:47+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049663595472694 2026-08-06 20:17:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7nebdrb66nk2l...
CVE-2026-65578
creationtimestamp| type| source ---|---|--- 2026-08-06 16:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggqohynx22...
CVE-2026-65556
creationtimestamp| type| source ---|---|--- 2026-08-06 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggjij3sw23...
CVE-2026-65548
creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcelol42b...
CVE-2026-65546
creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcd7m3t2o 2026-08-12 00:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msttzaxsnp2a...