171503 matches found
CVE-2026-100629: Incorrect Authorization
Capgo capgo.app backend before 12.127.5 contains an authorization flaw in the PATCH /private/rolebindings/:bindingid endpoint. The handler verifies that the newly assigned role's priority rank does not exceed the caller's own rank, but — unlike the DELETE handler — it never checks the rank of the...
PT-2026-99300
Name of the Vulnerable Software and Affected Versions Capgo capgo.app backend versions prior to 12.127.5 Description An authorization flaw exists in the 'PATCH /private/role bindings/:binding id' endpoint. The handler verifies that the priority rank of a newly assigned role does not exceed the...
PT-2026-99281
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description Insufficient route-level permission checks and a lack of workspace or ownership validation in the backing service allow authenticated low-privilege users or those with a valid API key to access or...
CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...
CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...
CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
UBUNTU-CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
ROOT-APP-NPM-CVE-2024-21534 CVE-2024-21534 in jsonpath-plus - Patched by Root
Root has patched CVE-2024-21534 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-25210 CVE-2026-25210 in expat - Patched by Root
Root has patched CVE-2026-25210 in the expat package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-45186 CVE-2026-45186 in expat - Patched by Root
Root has patched CVE-2026-45186 in the expat package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root
Root has patched CVE-2023-51594 in the bluez package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-51589 CVE-2023-51589 in bluez - Patched by Root
Root has patched CVE-2023-51589 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2016-9917 CVE-2016-9917 in bluez - Patched by Root
Root has patched CVE-2016-9917 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root
Root has patched CVE-2023-51594 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2016-9798 CVE-2016-9798 in bluez - Patched by Root
Root has patched CVE-2016-9798 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27903 CVE-2026-27903 in minimatch - Patched by Root
Root has patched CVE-2026-27903 in the minimatch package for Root:npm. Multiple fixed versions available...