72712 matches found
CVE-2019-25756
creationtimestamp| type| source ---|---|--- 2026-06-19 19:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo3cxp2gs27...
CVE-2019-25750
creationtimestamp| type| source ---|---|--- 2026-06-19 19:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo2wblkl32h...
CVE-2026-49338
The CVE covers gonic, a Subsonic-compatible music server. Before 0.21.0, Subsonic API endpoints /rest/deletePlaylist.view and /rest/getPlaylist.view allowed any authenticated user to delete or read any other user’s private playlist due to missing per-resource authorization. The playlist ID is bas...
CVE-2017-20273
creationtimestamp| type| source ---|---|--- 2026-06-19 18:49:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monz2heaaq2z...
CGA-998F-MFGR-V7C9
Bulletin has no description...
CVE-2026-49339 Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist
gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit 6dd71e6a3c966867ef8c900d359a7df75789f410 added an ownership check based on playlist.UserID. However, playlist.UserID is derived from the first path segment of the attacker-controll...
CGA-6FR8-38F7-7RW8
Bulletin has no description...
CVE-2026-56211
creationtimestamp| type| source ---|---|--- 2026-06-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k...
EUVD-2019-20197
Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the dealid parameter. Attackers can send GET requests to index.php with option=comjoomcrm&view=contacts and inject SQL...
MINI-CXF8-GCHF-G7JQ
Bulletin has no description...
MINI-MG8J-VXHP-C6W9
Bulletin has no description...
MINI-FWV7-JJ44-2FM8
Bulletin has no description...
MINI-4XP5-52WG-2257
Bulletin has no description...
MINI-FR6X-HWRR-R6P5
Bulletin has no description...
MINI-VHVX-F4H8-PH74
Bulletin has no description...
MINI-G994-V9XV-8C3M
Bulletin has no description...
MINI-XWHV-M24F-59M2
Bulletin has no description...
CVE-2011-1950
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:38+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa8db595-da1c-47fa-bac7-87cac472ba08 2026-06-23 14:04:10+00:00| exploited|...
CVE-2014-0295
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e16ea5b7-ec2c-4416-bb43-8a84499078ea 2026-06-23 14:04:07+00:00| exploited|...