72350 matches found
CVE-2025-32781
Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...
CVE-2026-61873
creationtimestamp| type| source ---|---|--- 2026-07-15 16:14:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4jgjut22x...
CVE-2026-44986
creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zwwfih2x 2026-07-16 09:01:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqqurwh7u42e 2026-07-16 09:01:50+00:00| seen|...
CVE-2026-56339
creationtimestamp| type| source ---|---|--- 2026-07-15 15:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2o7cnt32o 2026-07-16 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqr5mlyta527...
CVE-2026-54560
Cloudreve is a self-hosted file management and sharing system. From 4.12.0 until 4.16.1, Cloudreve's OAuth access tokens are issued without the OAuth clientid claim, so the JWT verifier does not load token scopes into request context and RequiredScopes treats the request like non-scoped session...
CVE-2026-54058
creationtimestamp| type| source ---|---|--- 2026-07-15 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoxacvh3y2j 2026-07-20 21:46:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4benmlmo2q 2026-07-20 22:37:49+00:00| published-proof-of-concept|...
CGA-3F93-WHMH-CG39
Bulletin has no description...
GHSA-39PV-4J6C-2G6V vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2026-49501
creationtimestamp| type| source ---|---|--- 2026-07-15 13:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqouq5kqrm2i...
CGA-FCFW-JR2W-4QXW
Bulletin has no description...
CGA-QGGX-9F44-V55X
Bulletin has no description...
CGA-8G3G-5W5F-P9RF
Bulletin has no description...
CVE-2026-15690
creationtimestamp| type| source ---|---|--- 2026-07-15 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqon5ostp52g 2026-07-21 08:49:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5ggyp73z27 2026-07-21 08:49:52+00:00| seen|...
CVE-2026-59236 Authorization bypass in Prospero Flow CRM Excel import allows cross-tenant record injection
Authorization Bypass Through User-Controlled Key CWE-639 in the Excel import handlers CustomerImport, LeadImport, ProductImport in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to create customer, lead, and product records inside another company...
CVE-2026-59236
Authorization Bypass Through User-Controlled Key CWE-639 in the Excel import handlers CustomerImport, LeadImport, ProductImport in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to create customer, lead, and product records inside another company...
MINI-RJGH-6C8P-Q8X2
Bulletin has no description...
MINI-2XC6-8WQC-666Q
Bulletin has no description...
MINI-CW7C-8P24-WGQW
Bulletin has no description...