Lucene search
+L

123470 matches found

OSV
OSV
added 2026/04/30 6:22 p.m.10 views

CVE-2026-40601 Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chartid/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify that the...

7.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/04/30 6:22 p.m.26 views

CVE-2026-40601

Chartbrew 4.9.0 exposes POST /api/chart/:chart_id/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify chart ownership, report/public status, or sharing policy, allowing an unauthenticated attacker who knows a chart ID to trigger a data refresh and re...

7.5CVSS5.4AI score0.00326EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 6:22 p.m.10 views

CVE-2026-40601

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chartid/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify that the...

7.5CVSS5.3AI score0.00326EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/30 6:22 p.m.8 views

CVE-2026-40601 Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chartid/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify that the...

7.5CVSS5.7AI score0.00326EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/30 6:12 p.m.54 views

GHSA-56C3-VFP2-5QQJ n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders

Impact In the SDK embedder path N8NDocumentationMCPServer constructor, getN8nApiClient, and validateInstanceContext, the synchronous URL validator in SSRFProtection.validateUrlSync had no IPv6 checks. IPv4-mapped IPv6 addresses such as http://::ffff:169.254.169.254 bypassed the cloud-metadata,...

8.5CVSS5.8AI score0.00206EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/04/30 6:12 p.m.16 views

n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders

Impact In the SDK embedder path N8NDocumentationMCPServer constructor, getN8nApiClient, and validateInstanceContext, the synchronous URL validator in SSRFProtection.validateUrlSync had no IPv6 checks. IPv4-mapped IPv6 addresses such as http://::ffff:169.254.169.254 bypassed the cloud-metadata,...

8.5CVSS5.5AI score0.00206EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/04/30 5:34 p.m.23 views

GHSA-CG4X-64P3-X59H CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`

Impact A vulnerability in datastoresearchsql allowed attackers to bypass authorization in order to gain access to private resources and PostgreSQL system information Patches The issue has been patched in CKAN 2.10.10 and CKAN 2.11.5 Workarounds Disable the DataStore SQL search...

8.8CVSS5.8AI score0.00367EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/30 5:28 p.m.21 views

GHSA-CWCX-382V-8M9G Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url

Impact An authenticated user with project.add permission default on hosted Weblate SaaS and for any user holding an active billing/trial plan can import a crafted project backup ZIP whose components/.json contains an attacker-chosen repo URL pointing at a private address e.g. http://127.0.0.1:999...

5.3CVSS5.8AI score0.00371EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/04/30 5:28 p.m.19 views

Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url

Impact An authenticated user with project.add permission default on hosted Weblate SaaS and for any user holding an active billing/trial plan can import a crafted project backup ZIP whose components/.json contains an attacker-chosen repo URL pointing at a private address e.g. http://127.0.0.1:999...

8.1CVSS5.2AI score0.00371EPSS
SaveExploits0References8Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/30 2:47 p.m.11 views

CVE-2026-42430

OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks. Attackers can exploit request-time navigation to reach private targets that should be restricted by browser SSRF protections...

6.5CVSS5.2AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/30 1:16 p.m.12 views

CVE-2026-7382

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation. This issue affects PDKS: from V16.20200313 before VMYR3.5.2025117...

6.5CVSS0.00344EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/30 12:34 p.m.39 views

CVE-2026-7382 Information Disclosure in MeWare Software's PDKS

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation. This issue affects PDKS: from V16.20200313 before VMYR3.5.2025117...

6.5CVSS0.00344EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/30 12:34 p.m.11 views

EUVD-2026-26370

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation. This issue affects PDKS: from V16.20200313 before VMYR3.5.2025117...

6.5CVSS5.2AI score0.00344EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/04/30 11:14 a.m.24 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.9CVSS5.3AI score0.00899EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/30 11:14 a.m.24 views

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

9.9CVSS5.4AI score0.00899EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/30 11:09 a.m.18 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.9CVSS5.3AI score0.00899EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/30 11:09 a.m.46 views

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

9.9CVSS5.4AI score0.00899EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/30 10:22 a.m.22 views

cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification ECDSA and...

8.2CVSS8.5AI score0.00341EPSS
SaveExploits0References6
Fedora
Fedora
added 2026/04/30 1:30 a.m.19 views

[SECURITY] Fedora 42 Update: asterisk-18.26.4-1.fc42

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

9.8CVSS6.8AI score0.4557EPSS
SaveExploits14
Fedora
Fedora
added 2026/04/30 1:21 a.m.15 views

[SECURITY] Fedora 43 Update: asterisk-18.26.4-1.fc43

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

9.8CVSS6.8AI score0.4557EPSS
SaveExploits14
Rows per page
Query Builder