26734 matches found
RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) (RHSA-2026:39808)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39808 advisory. Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. Security Fixes: Keystone: OpenStack...
Linux Distros Unpatched Vulnerability : CVE-2026-42616
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a...
CVE-2026-58555
creationtimestamp| type| source ---|---|--- 2026-07-15 23:55:53+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926693544662612...
CVE-2026-47999
creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524...
CVE-2026-15746
creationtimestamp| type| source ---|---|--- 2026-07-15 20:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpls3eges2s...
CVE-2026-45417 DataEase: SQL injection vulnerability
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...
CVE-2026-45417 DataEase: SQL injection vulnerability
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...
CVE-2026-45417
DataEase (open source data visualization/analysis tool) is affected by a SQL injection in the CalciteProvider#checkStatus path. Before version 2.10.23, datasource connection status checks concatenate configuration.getSchema() into getTablesSql and then executeQuery runs the resulting SQL, enablin...
EUVD-2026-44776
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...
CVE-2026-45417 DataEase: SQL injection vulnerability
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...
GHSA-7FH5-64P2-3V2J
creationtimestamp| type| source ---|---|--- 2026-07-15 19:18:31+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...
CVE-Hunter
CVE Hunter Pro A Chrome extension for fast, single-lookup CVE...
GHSA-JHW3-9Q9R-GC5W
creationtimestamp| type| source ---|---|--- 2026-07-15 17:21:51+00:00| seen| https://gist.github.com/Mundi-Xu/99af1b08275fd437cfb79bfe481e68b7...
CVE-2026-20146
creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-20 00:04:15+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mqzymsvplg2e...
MantisBT: REST API unauthorized Issue status change
A MantisBT user having $gupdatebugthreshold UPDATER by default can change an Issue's Status via REST and SOAP API, even if the $gsetstatusthreshold config is set to a higher level DEVELOPER by default. Impact Unauthorized change in Issue workflow. Patches...
Missing Authorization
Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Missing Authorization via the REST and SOAP API process. An attacker can modify issue statuses without proper authorization by sending crafted API requests that bypass intended access controls...
CVE-2026-14354
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow4t54qn2f 2026-07-29 16:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrscg7ehc52b...
CVE-2026-61740 LightRAG: Authentication bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAGAPIKEY set but AUTHACCOUNTS unset, X-API-Key protection can be bypassed because lightrag/api/auth.py falls back to a hardcoded DEFAULTTOKENSECRET, /auth-status and /login can...
CVE-2026-61740
LightRAG vulnerability CVE-2026-61740 affects LightRAG prior to v1.5.4. When LIGHTRAG_API_KEY is set but AUTH_ACCOUNTS is unset, authentication protection can be bypassed: lightrag/api/auth.py falls back to a hardcoded DEFAULT_TOKEN_SECRET, /auth-status and /login can mint guest JWTs, and combine...
