23248 matches found
CVE-2026-14476
creationtimestamp| type| source ---|---|--- 2026-07-07 11:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2iytgfgd2a 2026-07-20 13:12:20+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mr3enz3dlw2l 2026-07-20 14:14:46+00:00| seen|...
CVE-2025-63079
creationtimestamp| type| source ---|---|--- 2026-07-07 11:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2i47t6uk2r 2026-07-07 11:16:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mq2i4bpfxr24...
Improper Authorization
Keycloak is vulnerable to improper authorization. The vulnerability is due to missing validation that the target user belongs to the caller's realm in certain user read endpoints, which allows a tenant realm administrator to access profile information, client roles, and realm roles of users acros...
CVE-2026-8306
creationtimestamp| type| source ---|---|--- 2026-07-07 08:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25wlek3u2w...
CVE-2026-57867
creationtimestamp| type| source ---|---|--- 2026-07-07 07:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23cby4z22b...
CVE-2026-56044
creationtimestamp| type| source ---|---|--- 2026-07-07 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq22p3vtqu2n 2026-07-07 07:25:29+00:00| seen| https://bsky.app/profile/potato.software/post/3mq237t753r2y...
CVE-2026-10834
The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...
CVE-2026-10834 WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image
The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...
CVE-2026-10834
The CVE covers the WP Travel Engine WordPress plugin (pre-6.8.1) where input validation for a user-supplied profile image path is insufficient before the file is moved. The vulnerability allows authenticated users with subscriber-level access or higher to relocate arbitrary files within the WordP...
EUVD-2026-42010
The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...
CVE-2026-34149
creationtimestamp| type| source ---|---|--- 2026-07-07 04:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzrr7czc623...
CVE-2026-34198
creationtimestamp| type| source ---|---|--- 2026-07-07 04:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzr7cexwq2y...
CVE-2026-34057
creationtimestamp| type| source ---|---|--- 2026-07-07 04:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqkwrtlp22...
CVE-2026-42143
creationtimestamp| type| source ---|---|--- 2026-07-07 04:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a 2026-07-07 06:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u...
CVE-2026-34152
creationtimestamp| type| source ---|---|--- 2026-07-07 04:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpxzrmfu24 2026-07-07 07:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzzu4caya25 2026-07-08 05:09:15+00:00| seen|...
CVE-2026-42204
creationtimestamp| type| source ---|---|--- 2026-07-07 00:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzejfdhmj2y...
CVE-2026-53641
creationtimestamp| type| source ---|---|--- 2026-07-07 00:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzeagtf7d2w...
CVE-2026-42148
creationtimestamp| type| source ---|---|--- 2026-07-07 00:26:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdrvg3vk24...