MINI-3H83-FV2F-VC8R

Bulletin has no description...

MINI-CRRX-R358-G7JH

Bulletin has no description...

MINI-2Q63-CFVP-34F3

Bulletin has no description...

MINI-XRJH-3JQH-54R7

Bulletin has no description...

MINI-MJG8-4W84-7PQ6

Bulletin has no description...

MINI-HH2F-5V6J-J6CR

Bulletin has no description...

MINI-W7XQ-5H46-4784

Bulletin has no description...

MINI-P4Q5-632F-VXWC

Bulletin has no description...

MINI-3J3F-H7VC-96C3

Bulletin has no description...

MINI-W297-4HQR-892Q

Bulletin has no description...

MINI-JM9C-8Q57-F33G

Bulletin has no description...

MINI-5J4Q-XCCP-5CMG

Bulletin has no description...

MINI-JC9G-PP45-Q5Q2

Bulletin has no description...

MINI-2RRQ-28P4-9V8W

Bulletin has no description...

GHSA-33G4-646G-QWMM Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update

Impact The BulkAssetsController::update method accepts companyid directly from user input without calling Company::getIdForCurrentUser, the standard company-scoping function used by every other controller in the codebase. A non-superadmin user can move assets across company boundaries, breaking...

GHSA-8C6H-7G6X-M5X4

creationtimestamp| type| source ---|---|--- 2026-06-23 22:42:14+00:00| seen| https://gist.github.com/alon710/b22b0dd984dd927be769bc999880e7f3...

UBUNTU-CVE-2026-54512

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator PTV is the primary safety mechanism guarding polymorphic deserialization. When polymorphic...

EUVD-2026-38595

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator PTV is the primary safety mechanism guarding polymorphic deserialization. When polymorphic...

CVE-2026-56120

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-56784...

CVE-2026-47279

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the public shared-view relation endpoints accepted a caller-supplied column ID without verifying that the column was visible in the shared view, so anyone holding a share UUID could read links from any LTAR column on t...