5235 matches found
CVE-2026-25562
CVE-2026-25562 affects WeKan versions prior to 8.19. Multiple connected sources (PT-2026-6925, Red Hat, NVD/NVD-linked entries) describe an information disclosure where attachment metadata can be returned without proper scoping to boards/cards accessible to the user. Root cause: the system does n...
CVE-2026-25562 WeKan < 8.19 Attachments Publication Information Disclosure
WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment metadata can be returned without properly scoping results to boards and cards accessible to the requesting user, potentially exposing attachment metadata to unauthorized users...
CVE-2026-25562
WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment metadata can be returned without properly scoping results to boards and cards accessible to the requesting user, potentially exposing attachment metadata to unauthorized users...
CVE-2026-1568
creationtimestamp| type| source ---|---|--- 2026-02-03 17:23:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxusoicir22 2026-02-04 08:40:16+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3mdzi2h4i5k26 2026-02-04 08:40:17+00:00| seen|...
GCVE-1-2026-0009
creationtimestamp| type| source ---|---|--- 2026-01-29 14:42:24+00:00| seen| https://vulnerability.circl.lu/bundle/822f8677-7cc7-44e9-8414-329e2be8aaf1...
CGA-WQ33-7GGC-QW9M
Bulletin has no description...
CGA-P68X-XVRM-C3XM
Bulletin has no description...
CGA-4QG5-9PQF-W4H4
Bulletin has no description...
CVE-2026-1425
creationtimestamp| type| source ---|---|--- 2026-01-26 09:43:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcxfkvvbn2n 2026-01-26 10:58:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115961044303697007...
CVE-2026-1097
creationtimestamp| type| source ---|---|--- 2026-01-24 10:36:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5zfkfbha2j...
EUVD-2026-4251
Missing Authorization vulnerability in Ryviu Ryviu Product Reviews for WooCommerce ryviu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ryviu Product Reviews for WooCommerce: from n/a through = 3.1.26...
Insufficient Verification of Data Authenticity
Overview org.webjars.npm:sm-crypto is a sm-crypto Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the SM2 decryption logic. An attacker can recover sensitive private key material by repeatedly interacting with the decryption interface...
CVE-2025-66692
creationtimestamp| type| source ---|---|--- 2026-01-20 17:36:23+00:00| seen| https://gist.github.com/inkman97/b791189338f73b758c31a7db3cd50c2d 2026-01-21 17:38:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx7ln6ft32h...
CVE-2024-30251
creationtimestamp| type| source ---|---|--- 2026-01-19 22:03:49+00:00| seen| https://gist.github.com/konard/2f071c4633544cee29412109ee72a019 2026-01-19 23:16:44+00:00| seen| https://gist.github.com/konard/2ab7f7aec831dac7fe234e8446d13f57 2026-01-19 23:19:13+00:00| seen|...
EUVD-2026-1996
hermes's raw options logging may disclose secrets passed in via subcommand options argument...
GHSA-3RG7-WF37-54RM
creationtimestamp| type| source ---|---|--- 2026-01-12 18:07:23+00:00| published-proof-of-concept| Telegram/LwEZji0yzP27YN8omVGHFZ6AM7CJ9LdqNK-dme10ZwkkWc...
CVE-2025-15505
creationtimestamp| type| source ---|---|--- 2026-01-11 03:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc4lju2pkm2e...
CVE-2024-5153
creationtimestamp| type| source ---|---|--- 2026-01-11 03:00:05+00:00| published-proof-of-concept| Telegram/RPM8b5f0oHP93zJNrN3pNqcQzMrEmRo2gxGCGl2f8PtFjS4...