72714 matches found
CGA-73QJ-WQCV-39RP
Bulletin has no description...
GHSA-HJXC-462X-X77J vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2026-22016 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-72GW-MP4G-V24J
creationtimestamp| type| source ---|---|--- 2026-06-17 19:41:25+00:00| seen| https://gist.github.com/alon710/e8e930bfaf0a04644c5861c1af92ed10 2026-07-02 16:42:59+00:00| seen| https://gist.github.com/konard/2d84a73c0ff6413bca5b0e79fa90d50e 2026-07-03 13:46:20+00:00| seen|...
MAL-2026-6075 Malicious code in opt-archetype-check (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6497b3f44c017bc9ba783cd75e17d4992f79542d8819558da92e152ee4d4471e On npm install, the package's postinstall hook executes node index.js, which collects the installer's public IP via api.ipify.org, hostname, username...
CVE-2026-20246
creationtimestamp| type| source ---|---|--- 2026-06-17 18:50:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiy75gbak2f 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928...
EUVD-2025-210214
In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-20190
creationtimestamp| type| source ---|---|--- 2026-06-17 18:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928 2026-06-18 13:15:12+00:00| seen|...
CVE-2026-20220
creationtimestamp| type| source ---|---|--- 2026-06-17 18:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwkjvl2j2m 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928...
GHSA-8788-J68R-3CGH Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Summary The ydoc:document:join Socket.IO handler checks note ownership only when the documentid starts with note: colon. However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores documentid.replace":", "". An attacker can join a document room using no...
CVE-2026-6734
creationtimestamp| type| source ---|---|--- 2026-06-17 16:40:20+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiqvjtjr22g 2026-06-18 15:59:03+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n3uli2x 2026-06-19 05:12:21+00:00| seen|...
MINI-9G3F-JM52-5VCC
Bulletin has no description...
MINI-GVC7-GGGG-RW62
Bulletin has no description...
MINI-PR6R-6GJW-3XR9
Bulletin has no description...
MINI-3CJJ-252F-868G
Bulletin has no description...
MINI-GC3H-MGPF-54F6
Bulletin has no description...
MINI-3F9J-8HXC-4HV2
Bulletin has no description...
MINI-6WVF-4FWW-7HV3
Bulletin has no description...