117840 matches found
Use of Less Trusted Source
Overview Affected versions of this package are vulnerable to Use of Less Trusted Source. Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded request headers it receives from untrusted proxies to downstream services. Both the WebFlux and WebMVC Gateway Servers process these...
PT-2026-48718
Name of the Vulnerable Software and Affected Versions Quest Bot versions prior to 1.0.5 Description Quest Bot is an open-source Discord Bot designed for moderation, utilities, and support. The bot fails to suppress mentions in the '/unban' and '/unwarn' endpoints, allowing user-controlled reason...
PT-2026-48714
Name of the Vulnerable Software and Affected Versions Quest Bot versions prior to 1.0.4 Description Several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. This allows a moderator who lacks the permission to mention everyone to force t...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a vulnerability related to input validation errors. This vulnerability stemmed from insufficient validation for untrusted inputs in the Network component. It could allow remote...
The vulnerability of the privacy protection function of Fenced Frames in Microsoft Edge and Google Chrome browsers allows attackers to bypass existing security mechanisms.
The vulnerability of the confidentiality function of Fenced Frames in Microsoft Edge and Google Chrome is related to a lack of verification mechanism for the source of the data. Exploiting this vulnerability can allow attackers to bypass existing security measures remotely...
CVE-2026-53739
creationtimestamp| type| source ---|---|--- 2026-06-10 23:37:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxuwqfxhx2h...
CVE-2026-53740
creationtimestamp| type| source ---|---|--- 2026-06-10 23:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxtu746tt23...
CVE-2026-10143
creationtimestamp| type| source ---|---|--- 2026-06-10 23:05:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxt5a2sss2h 2026-06-11 07:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnynq3sgq72i 2026-07-01 15:21:42+00:00| seen|...
CVE-2026-42542
creationtimestamp| type| source ---|---|--- 2026-06-10 22:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsn4j3i42y...
GHSA-P9CG-VQCC-GRCX
creationtimestamp| type| source ---|---|--- 2026-06-10 22:51:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsdlo6672x...
CVE-2026-20253
creationtimestamp| type| source ---|---|--- 2026-06-10 22:04:55+00:00| seen| https://bsky.app/profile/crustytldr.bsky.social/post/3mnxprjs3hj2n 2026-06-11 00:32:43+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3 2026-06-11 03:00:30+00:00| seen|...
EUVD-2026-36177
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally designed to operate without a challenge–response authentication model. This has been changed in versions 6.9.13-48 an...
EUVD-2026-36164
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.45.1-0.1.hum1 aarch64, x8664 syft-1.45.1-0.1.hum1.src src...
CVE-2026-46625 JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection
JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign helper copies properties with for...in + plain assignment. When the source object is produced by JSON.parse, the JSON object's "proto" member is an own enumerable property,...
CVE-2026-20251
creationtimestamp| type| source ---|---|--- 2026-06-10 20:23:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnxk446ell2m 2026-06-11 00:32:43+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3 2026-06-15 01:27:12+00:00| seen|...
CVE-2026-11417
creationtimestamp| type| source ---|---|--- 2026-06-10 20:21:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnxjynboly2i 2026-06-13 19:00:11+00:00| published-proof-of-concept| Telegram/UUlhUbRH-lM0c2HkqQnuE7VUmZM0B1Eg2dBpWy1dBuIGV4 2026-06-13 21:00:04+00:00|...
CVE-2026-47936
creationtimestamp| type| source ---|---|--- 2026-06-10 20:08:34+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxjbifi562j...