30889 matches found
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the tracked-time deletion process. An attacker can remove time tracking entries associated with issues they do not have permission to modify by specifying the time entry ID from anothe...
CVE-2026-25782 Gitea tracked-time deletion can target entries from another issue
Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue...
EUVD-2026-41626
Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue...
CVE-2026-44268
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an incorrect permission Assignment for critical resource vulnerability. A hi...
Certified Asterisk 20.7-cert11 Security Release
The Asterisk Development Team would like to announce security release Certified Asterisk 20.7-cert11. It addresses 18 security issues...
Certified Asterisk 22.8-cert3 Security Release
The Asterisk Development Team would like to announce security release Certified Asterisk 22.8-cert3. It addresses 20 security issues...
Asterisk 22.10.1 Security Release
The Asterisk Development Team would like to announce security release Asterisk 22.10.1. It addresses 20 security issues...
Asterisk 21.12.3 Security Release
The Asterisk Development Team would like to announce security release Asterisk 21.12.3. It addresses 20 security issues...
Asterisk 23.4.1 Security Release
The Asterisk Development Team would like to announce security release Asterisk 23.4.1. It addresses 20 security issues...
Asterisk 20.20.1 Security Release
The Asterisk Development Team would like to announce security release Asterisk 20.20.1. It addresses 19 security issues...
openSUSE 16 Security Update : dnsmasq (openSUSE-SU-2026:21192-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21192-1 advisory. This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in logquery when logging unsupported...
Cybersecurity Mission Creep in the US
Interesting paper: "Cybersecurity Mission Creep." Abstract: Cybersecurity is experiencing mission creep. Policymakers are casting more and more problems as issues of cybersecurity. So reframed, wildly different policy issues, from misinformation, to child social media safety laws, to antitrust...
CVE-2026-13957
creationtimestamp| type| source ---|---|--- 2026-07-02 07:47:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:19:59+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...
CVE-2026-46088
creationtimestamp| type| source ---|---|--- 2026-07-02 06:50:15+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:18:42+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...
CVE-2025-71295
creationtimestamp| type| source ---|---|--- 2026-07-02 05:46:17+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...
OPENSUSE-SU-2026:11176-1 kitty-0.47.4-2.1 on GA media
These are all security issues fixed in the kitty-0.47.4-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55556
These are all security issues fixed in the kitty-0.47.4-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55560
These are all security issues fixed in the python311-mistune-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55200
PraisonAI before 0.1.7 fails to validate that project id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...