72353 matches found
CVE-2026-53712 SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms
SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common allows an attacker capable of a TLS...
CVE-2026-9198
creationtimestamp| type| source ---|---|--- 2026-07-17 18:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquedxsgce2v 2026-07-18 20:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqx2jkspbj2f 2026-07-22 16:00:04+00:00| seen|...
CVE-2026-9202
creationtimestamp| type| source ---|---|--- 2026-07-17 18:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqueagavxm2u 2026-07-18 17:01:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqwqjem3xu2l 2026-07-18 17:01:24+00:00| seen|...
CVE-2026-51083
creationtimestamp| type| source ---|---|--- 2026-07-17 18:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mque7ahppv2e...
CVE-2026-49212
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, the HMAC computed by Symfony\UX\LiveComponent\LiveComponentHydrator covered only sorted prop key/value pairs and did not include the component name, the slot identifier props vs propsFromParent, or request contex...
CVE-2026-11763
Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows Exploitation of Trusted Identifiers. This issue affects GisLab Laboratory Management System: from 1.4.03...
CVE-2026-63101 Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...
CVE-2026-8297
CVE-2026-8297 describes an SQL injection in GisLab Laboratory Management System by Gis Informatics Engineering Consulting (Gis Informatics). Affected versions: 1.4.03 through 08072026. The issue is a generic SQL injection vulnerability with network attack vector, no user interaction, and no privi...
Security Bulletin: IBM DataPower Gateway vulnerable to memory corruption in OS kernel (CVE-2023-53178)
Summary IBM DataPower Gateway vulnerable to memory corruption in OS kernel CVE-2023-53178 Vulnerability Details CVEID:CVE-2023-53178 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a ra...
CVE-2026-15783
CVE-2026-15783 (GitHub Enterprise Server) describes a missing authorization flaw where an authenticated user with write access to any repository could read metadata from private repositories they should not access. The attack path involves a delegated bypass endpoint that resolves a rule suite fr...
CVE-2026-38158
creationtimestamp| type| source ---|---|--- 2026-07-17 15:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqtzxeo5v72v...
CVE-2026-16009
creationtimestamp| type| source ---|---|--- 2026-07-17 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtz26l66x2b...
CVE-2026-57432 vulnerabilities
Vulnerabilities for packages: perl...
CVE-2026-15902
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:47+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:58:35+00:00| seen|...
MINI-5GG4-47CR-XFX5
Bulletin has no description...
MINI-87Q4-R73X-FMQR
Bulletin has no description...
MINI-V7HM-6HFQ-24GJ
Bulletin has no description...
MINI-H5XV-7877-9RVF
Bulletin has no description...