26734 matches found
CVE-2026-59837
creationtimestamp| type| source ---|---|--- 2026-07-15 10:13:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116923458848771348 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-09-04 21:19:09+00:00| seen|...
Important: Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update
An update for openstack-keystone is now available for Red Hat OpenStack Services on OpenShift 18.0 Antelope. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling
A flaw was found in OpenStack Keystone. When using the LDAP identity backend, the system incorrectly processes the user enabled attribute if the userenabledinvert configuration option is set to False. This error causes users marked as disabled in LDAP to be treated as enabled within Keystone,...
CVE-2026-59839
creationtimestamp| type| source ---|---|--- 2026-07-15 07:22:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116922788149851186 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...
SUSE CVE-2026-57213
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...
CVE-2026-15765
creationtimestamp| type| source ---|---|--- 2026-07-15 01:46:28+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqnlyxa5oo25 2026-07-16 04:45:09+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-16 23:03:15+00:00|...
PT-2026-60358
A MantisBT user having $g update bug threshold UPDATER by default can change an Issue's Status via REST and SOAP API, even if the $g set status threshold config is set to a higher level DEVELOPER by default. Impact Unauthorized change in Issue workflow. Patches...
PT-2026-60273
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...
The vulnerability of the OCSP protocol implementation in the Apache HTTP Server allows a perpetrator to induce a service failure.
The vulnerability of the OCSP protocol implementation in the Apache HTTP Server is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
EUVD-2026-44364
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review...
CVE-2026-15701
creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyuqumh72z...
CVE-2026-15641
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review...
CVE-2026-50380
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 20:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyydrqg72z 2026-07-14 22:02:20+00:00| seen|...
CVE-2026-47212
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse received the configured webhook secret but ignored the X-Twilio-Signature HMAC header, allowing unauthenticated POST requests to inje...
CVE-2026-15641
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review...
CVE-2026-15641
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review...
CVE-2026-15641
Devolutions Server versions 2026.2.11 and 2026.1.22 are vulnerable to an improper authorization flaw in the access request status endpoint . An authenticated low-privileged user can approve their own pending access requests by making a direct call to this endpoint, effectively bypassing the manda...
CVE-2026-15641
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review...
