262205 matches found
CVE-2026-55950
creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...
EUVD-2026-41208
Craft CMS: Missing peer-permission check in AssetsController::actionDeleteFolder allows deletion of other users' assets...
CVE-2026-55114
creationtimestamp| type| source ---|---|--- 2026-07-02 18:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponeajoqd2v 2026-07-03 07:05:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyayifuw27 2026-07-07 05:07:08+00:00| seen|...
DEBIAN-CVE-2026-54891
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...
CVE-2026-50282
Craft CMS is a content management system CMS. Versions 5.0.0-RC1 and above, prior to 5.9.21 and versions 4.0.0-RC1 and above prior to 4.17.14 contain an authorization issue where a forced folder move can delete a conflicting destination folder without destination delete permission. Function...
CVE-2026-56004
creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj4u4vxb2v 2026-07-02 19:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqdaf76u2v 2026-07-03 07:19:31+00:00| seen|...
CVE-2026-56842
creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj4mzudb2v 2026-07-02 18:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpooxqxrlq2z 2026-07-03 07:26:23+00:00| seen|...
EUVD-2026-41412
The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tlshandshake13:handlepresharedkey/3, an OfferedPreSharedKeys record with a...
EUVD-2026-41409
Craft CMS is a content management system CMS. Versions 5.7.0 and above, prior to 5.9.21 contain a mass-assignment flaw in the bulk-duplicate element action. An attacker who is only able to duplicate their own entires can submit an arbitrary id through the newAttributes request parameter. The...
CVE-2026-54408
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming...
CVE-2026-55111
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight...
CVE-2026-54403
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances...
CVE-2026-55116
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices...
CVE-2026-14355
creationtimestamp| type| source ---|---|--- 2026-07-02 14:39:44+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpob5prgns2v 2026-07-02 14:41:26+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpobaraj7c2v 2026-07-02 14:43:07+00:00| seen|...
CVE-2026-12166 CVE-2026-12166
A NULL pointer dereference vulnerability for driver GFACSysx64.sys in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash...
CVE-2026-38891
creationtimestamp| type| source ---|---|--- 2026-07-02 14:30:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoamueozu2n 2026-07-03 09:24:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7zgfzit2p...
CVE-2026-54712
creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w 2026-07-03 09:15:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y 2026-07-29 20:31:26+00:00| seen|...
GHSA-CQP7-WF4C-3XGC vulnerabilities
Vulnerabilities for packages: grafana-fips...