27163 matches found
CVE-2026-21992
creationtimestamp| type| source ---|---|--- 2026-03-20 06:01:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116259977375105317 2026-03-20 13:05:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilf4nf2c2s 2026-03-20 13:09:35+00:00| seen|...
CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...
CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...
CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...
CVE-2026-32765
This repository is no longer public...
Fixed in Apache Tomcat 11.0.20
Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 021d1f83. This issue was reported to the Tomcat security team o...
Fixed in Apache Tomcat 9.0.116
Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 95f77782. This issue was reported to the Tomcat security team o...
OneUptime: Data falsification vulnerability
OneUptime is a comprehensive solution developed by OneUptime OpenSource. It is used to monitor and manage your online services. Versions of OneUptime prior to 10.0.34 contained a data manipulation vulnerability. This vulnerability stemmed from the WhatsApp POST webhook processor not verifying the...
Linux Distros Unpatched Vulnerability : CVE-2026-4453
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium...
PT-2026-26542
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 Description Discourse is an open-source discussion platform. An authorization bypass in the poll plugin allowed authenticat...
PT-2026-26753
Name of the Vulnerable Software and Affected Versions Vikunja affected versions not specified Description A flaw in the password reset logic allows disabled users to regain access to their accounts. The ResetPassword function sets the user’s status to StatusActive after a successful password rese...
CVE-2026-1005
creationtimestamp| type| source ---|---|--- 2026-03-19 18:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgmozfhv52n...
CVE-2026-30402
creationtimestamp| type| source ---|---|--- 2026-03-19 17:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgktzze7n2u 2026-03-19 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs4rn6ve2s 2026-03-19 20:19:09+00:00| seen|...
CVE-2026-3511
creationtimestamp| type| source ---|---|--- 2026-03-19 12:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfzziy5xz2u 2026-03-19 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs5dak452s...
EUVD-2026-13065
The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserStatus' function in all versions up to, and including, 3.3.49. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
CVE-2026-27093
creationtimestamp| type| source ---|---|--- 2026-03-19 07:18:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfhjfw5ku2s 2026-03-19 08:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfkwo5lbg2n 2026-03-19 09:37:36+00:00| seen|...
Linux kernel RAID10 Sync Request DoS
The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel’s device driver for multiple devices RAID and LVM is related to display errors when reporting resource status due to inconsistent checks. Exploiting this vulnerability can allow an attacker t...
CVE-2022-49910
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-10-09 11:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mxgvtkqlsn2r...
CVE-2025-68367
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...