CVE-2026-46684

creationtimestamp| type| source ---|---|--- 2026-07-15 20:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplsfbiqb2l 2026-07-16 00:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxv6enic2a 2026-07-18 04:16:04+00:00| seen|...

CVE-2026-45534

creationtimestamp| type| source ---|---|--- 2026-07-15 20:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplsdyn722c 2026-07-16 00:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyxxtwrc2e...

CVE-2026-15746

creationtimestamp| type| source ---|---|--- 2026-07-15 20:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpls3eges2s...

CVE-2026-55954

creationtimestamp| type| source ---|---|--- 2026-07-15 20:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplor74bq2v...

CVE-2026-15895

creationtimestamp| type| source ---|---|--- 2026-07-15 20:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplnl5ild2l 2026-08-08 07:36:05+00:00| seen| https://gist.github.com/alon710/990635ffdd01b8358cf96c18cad137b7...

CVE-2026-62350

creationtimestamp| type| source ---|---|--- 2026-07-15 20:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplfhvrnj2i...

CVE-2026-62348

creationtimestamp| type| source ---|---|--- 2026-07-15 20:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplbun2nl2h...

CVE-2026-62353

creationtimestamp| type| source ---|---|--- 2026-07-15 20:36:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl6iytqy2s...

CVE-2026-8055

creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...

CVE-2017-18306

creationtimestamp| type| source ---|---|--- 2026-07-15 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqpjj457ba2f...

CVE-2026-46485

creationtimestamp| type| source ---|---|--- 2026-07-15 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj5fzol22x 2026-07-15 21:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnlvlhdp2m...

CVE-2026-58659

creationtimestamp| type| source ---|---|--- 2026-07-15 19:49:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpikb5eaz2n...

EUVD-2026-44785

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase enterprise token handling can let TokenFilterdoFilter pass X-DE-TOKEN values to TokenUtils.validate, which checks only token presence and length before userBOByTokentoken uses JWT.decode without signature...

EUVD-2026-44783

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

CVE-2026-20156

creationtimestamp| type| source ---|---|--- 2026-07-15 19:39:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphydbcrh2h 2026-07-16 00:22:54+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926799807904548 2026-07-16 13:00:30+00:00| seen|...

GHSA-JR4P-4XJH-FWVW

creationtimestamp| type| source ---|---|--- 2026-07-15 19:31:25+00:00| seen| https://gist.github.com/alon710/0bc2e259381309bd98ca630012fce3cb...

CVE-2026-50552

creationtimestamp| type| source ---|---|--- 2026-07-15 19:31:25+00:00| seen| https://gist.github.com/alon710/0bc2e259381309bd98ca630012fce3cb 2026-07-15 20:35:05+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-jr4p-4xjh-fwvw...

CVE-2026-40501

creationtimestamp| type| source ---|---|--- 2026-07-15 19:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphhoez2b2u...

CVE-2026-50030

DataEase prior to 2.10.23 exposes the SQL preview path (DatasetDataApi.previewSql/previewSqlCheck) via /de2api/datasetData/previewSql, accepting PreviewSqlDTO.sql, PreviewSqlDTO.datasourceId, and PreviewSqlDTO.isCross. The system stores decoded SQL in datasourceRequest.query and CalciteProvider.f...