262237 matches found
CVE-2026-41053 Over-inclusive team membership expansion in GitHub App authentication provider for Rancher
Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2...
CVE-2026-41053
CVE-2026-41053 affects Rancher’s GitHub authentication provider, specifically the team membership expansion, where an incorrect authentication caching flaw could grant principal access to any logged-in user. Affected versions are 2.13 prior to 2.13.6 and 2.14 prior to 2.14.2. Root cause: faulty c...
mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries
A flaw was found in MariaDB server. This vulnerability allows a low-privileged authenticated user to bypass a security control that normally restricts file operations. Specifically, the system failed to verify the necessary 'FILE' privilege when certain 'SELECT' statements, which write data to...
DEBIAN-CVE-2026-54475
Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can be broken as this is only checked in the client, allowing...
UBUNTU-CVE-2026-49877
Improper Authorization vulnerability in Apache ActiveMQ. An authenticated low-privilege Web Console user by default can access /admin/ paths in the Web Console. The default Jetty settings incorrectly did not limit those paths to only admins. This issue affects Apache ActiveMQ: before 5.19.8, from...
CVE-2026-50189
creationtimestamp| type| source ---|---|--- 2026-06-30 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpiudp2p3x2a...
vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or furth...
Important: Red Hat Security Advisory: giflib security update
An update for giflib is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
CVE-2026-12240
creationtimestamp| type| source ---|---|--- 2026-06-30 10:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpis2mbdhh2u 2026-06-30 22:17:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjzrq4vsk2i...
CVE-2025-24816
creationtimestamp| type| source ---|---|--- 2026-06-30 10:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqx6zo5j2j...
CVE-2026-49434
Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify entries in LDAP that match the configured searchBase and searchFilter can instantiate denied transports inside the broker JVM. This can be used...
CVE-2026-52760
CVE-2026-52760 is a Cross-site Scripting vulnerability in Apache ActiveMQ and its Web Console. The issue arises because the browse page renders a JMS message ID directly without sanitization, enabling an authenticated producer to send a crafted message ID that contains HTML/JavaScript, which will...
ROOT-APP-MAVEN-CVE-2026-35554 CVE-2026-35554 in io.root.org.apache.kafka:kafka-clients - Patched by Root
Root has patched CVE-2026-35554 in the io.root.org.apache.kafka:kafka-clients package for Root:Maven. Multiple fixed versions available...
Global Buffer Overflow in GNU gzip
...
Exploit for Improper Authentication in Oracle E-Business_Suite
cve-id ⚡ Simple Usage Use this project only in safe and...
ROOT-APP-NPM-CVE-2026-41650 CVE-2026-41650 in @rootio/fast-xml-parser - Patched by Root
Root has patched CVE-2026-41650 in the @rootio/fast-xml-parser package for Root:npm. Multiple fixed versions available...
CVE-2026-12819
creationtimestamp| type| source ---|---|--- 2026-06-30 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116837883833246326 2026-06-30 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpiiaagojq2p 2026-06-30 10:19:08+00:00| seen|...
CVE-2026-56808
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...