23322 matches found
Incorrect Authorization
Overview org.webjars.npm:auth0-js is a Client Side Javascript toolkit for Auth0 API. Affected versions of this package are vulnerable to Incorrect Authorization via token validation. An attacker can gain unauthorized access to user profile information by providing a specifically crafted invalid I...
GHSA-8QJV-JJ2Q-X832 Auth.js SDK has Improper Permission Checking
Description Under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. Am I Affected? Users are affected if they meet each of the following preconditions: - Applications built...
Auth.js SDK has Improper Permission Checking
Description Under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. Am I Affected? Users are affected if they meet each of the following preconditions: - Applications built...
CVE-2026-7598
creationtimestamp| type| source ---|---|--- 2026-05-06 17:01:17+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ml76ieixcb2n 2026-05-28 19:39:05+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmwrkm742c2b 2026-05-28 19:39:06+00:00| seen|...
CVE-2026-7641
creationtimestamp| type| source ---|---|--- 2026-05-06 16:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml74vx46hv2u...
CVE-2026-43281
creationtimestamp| type| source ---|---|--- 2026-05-06 14:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6wbueeoe2k 2026-07-06 05:55:21+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 06:56:45+00:00| seen...
CVE-2026-43279
creationtimestamp| type| source ---|---|--- 2026-05-06 14:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6vyu4yfe2p 2026-05-06 17:12:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528744471505427 2026-07-02 06:18:15+00:00| seen|...
CVE-2026-43272
creationtimestamp| type| source ---|---|--- 2026-05-06 14:21:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6vk67ngm2i...
CVE-2026-43271
creationtimestamp| type| source ---|---|--- 2026-05-06 14:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6uv3k2sb2t 2026-07-02 06:18:05+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...
CVE-2026-43274
creationtimestamp| type| source ---|---|--- 2026-05-06 14:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6umy3vxj2r...
CVE-2026-43267
creationtimestamp| type| source ---|---|--- 2026-05-06 13:59:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6udzphak2i...
CVE-2026-43270
creationtimestamp| type| source ---|---|--- 2026-05-06 13:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6u2zuljj2i 2026-07-02 06:18:02+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:19+00:00| seen...
CVE-2026-43283
creationtimestamp| type| source ---|---|--- 2026-05-06 13:49:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ts2ghof2i 2026-07-02 06:18:18+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 07:18:35+00:00| seen...
CVE-2026-42448
creationtimestamp| type| source ---|---|--- 2026-05-06 12:07:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ml6o3gh4nc2b 2026-05-26 19:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrp6zqwxp2n...
CVE-2026-23927
creationtimestamp| type| source ---|---|--- 2026-05-06 10:36:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6iz62mv72t 2026-05-06 14:30:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q...
CVE-2026-6788
creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:41:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aqfe6os2c 2026-05-06 17:43:28+00:00| seen|...
CVE-2026-6344
creationtimestamp| type| source ---|---|--- 2026-05-06 10:16:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hv7hps62o 2026-05-08 19:33:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlehvpbjhc2s...
CVE-2026-7448
creationtimestamp| type| source ---|---|--- 2026-05-06 10:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6gxral7h2q 2026-05-08 23:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlevcuetrz2c...
CVE-2026-7457
The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...