72229 matches found
GHSA-3WHF-VGF2-9W6G
creationtimestamp| type| source ---|---|--- 2026-07-31 20:31:22+00:00| seen| https://gist.github.com/alon710/124f7bf887e5079fb15a66958a9543ef...
GHSA-45HQ-CXWH-F6VC vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...
MINI-RPWV-Q5PF-976V
Bulletin has no description...
MINI-5FM3-9PX3-C9GP
Bulletin has no description...
MINI-949V-X8RW-28M9
Bulletin has no description...
MINI-H7Q3-8X84-9WGF
Bulletin has no description...
MINI-PQ5X-FJCQ-X829
Bulletin has no description...
MINI-G6WC-WCJV-W3QH
Bulletin has no description...
MINI-XH82-44M7-9M35
Bulletin has no description...
CVE-2026-54707
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...
CGA-PFX4-JF95-7W88
Bulletin has no description...
hashi-vault-js has a path traversal and query parameter injection
Summary The hashi-vault-js library is vulnerable to path traversal and query string injection due to the lack of proper encoding of identifiers in path segments and query strings. This allows attackers to manipulate the request URL and potentially access unintended downstream endpoints or inject...
CVE-2026-17566
creationtimestamp| type| source ---|---|--- 2026-07-31 17:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkvuq372u 2026-07-31 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgqkc5lt2i 2026-08-01 15:04:27+00:00| seen|...
GHSA-RC52-C4HV-W89P Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhook
Impact The shop payment webhook POST /locale/update-payment route syliusmollieshoppaymentwebhook accepts two independent, attacker-controlled parameters: id the Mollie payment ID, verified against Mollie's API and orderId the Sylius order ID, read directly from the database. The handler never...
SUSE CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-51277
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51249
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-28812
creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcm7hwyh2z...