CVE-2019-25754

creationtimestamp| type| source ---|---|--- 2026-06-19 19:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo4fipdtx2i...

CVE-2019-25756

creationtimestamp| type| source ---|---|--- 2026-06-19 19:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo3cxp2gs27...

CVE-2019-25750

creationtimestamp| type| source ---|---|--- 2026-06-19 19:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo2wblkl32h...

CVE-2026-49338

The CVE covers gonic, a Subsonic-compatible music server. Before 0.21.0, Subsonic API endpoints /rest/deletePlaylist.view and /rest/getPlaylist.view allowed any authenticated user to delete or read any other user’s private playlist due to missing per-resource authorization. The playlist ID is bas...

CVE-2017-20273

creationtimestamp| type| source ---|---|--- 2026-06-19 18:49:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monz2heaaq2z...

CGA-998F-MFGR-V7C9

Bulletin has no description...

CVE-2026-49339 Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist

gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit 6dd71e6a3c966867ef8c900d359a7df75789f410 added an ownership check based on playlist.UserID. However, playlist.UserID is derived from the first path segment of the attacker-controll...

CGA-6FR8-38F7-7RW8

Bulletin has no description...

CVE-2026-56211

creationtimestamp| type| source ---|---|--- 2026-06-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k...

EUVD-2019-20197

Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the dealid parameter. Attackers can send GET requests to index.php with option=comjoomcrm&view=contacts and inject SQL...

MINI-CXF8-GCHF-G7JQ

Bulletin has no description...

MINI-MG8J-VXHP-C6W9

Bulletin has no description...

MINI-FWV7-JJ44-2FM8

Bulletin has no description...

MINI-4XP5-52WG-2257

Bulletin has no description...

MINI-FR6X-HWRR-R6P5

Bulletin has no description...

MINI-VHVX-F4H8-PH74

Bulletin has no description...

MINI-G994-V9XV-8C3M

Bulletin has no description...

MINI-XWHV-M24F-59M2

Bulletin has no description...

CVE-2011-1950

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:38+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa8db595-da1c-47fa-bac7-87cac472ba08 2026-06-23 14:04:10+00:00| exploited|...

CVE-2014-0295

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e16ea5b7-ec2c-4416-bb43-8a84499078ea 2026-06-23 14:04:07+00:00| exploited|...