27196 matches found
CVE-2026-0834
creationtimestamp| type| source ---|---|--- 2026-01-21 21:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxm7pucd62j...
CVE-2021-47853
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
A critical deserialization vulnerability exists in Tendenci Helpdesk module NOTE, by default, Helpdesk is NOT enabled, affecting the version 15.3.11 and earlier. This vulnerability allows remote code execution RCE by an authenticated user with staff security level due to using Python's pickle...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
CVE-2026-23526: Privilege Defined With Unsafe Actions
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have the staff status may freely change their permissions, including giving themselves superuser status and joining the admin group, which gives them full access to...
CVE-2026-1218
creationtimestamp| type| source ---|---|--- 2026-01-20 22:06:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115929695095919658...
CVE-2025-49361
creationtimestamp| type| source ---|---|--- 2026-01-20 20:20:14+00:00| seen| Telegram/lOagtjil15Ub4GBqrQVevvjei3cTEL0Cvnja4ZNEunhgkjg...
CVE-2025-67521
creationtimestamp| type| source ---|---|--- 2026-01-20 20:18:28+00:00| seen| Telegram/eeEIgFJFtOpWfSHGPou7-0JqyTe0i0elKSfqYAgbFVKSyA...
CVE-2025-52751
creationtimestamp| type| source ---|---|--- 2026-01-20 20:02:55+00:00| seen| Telegram/Sv3522PaEvvyBvEaFweNGFijSfVyP3w9GONjJFps3lHHqs...
CVE-2025-49921
creationtimestamp| type| source ---|---|--- 2026-01-20 20:01:44+00:00| seen| Telegram/cjtGAhsCWRZcB7fX4mmtfre31X6Hs15n3DvRjNXJ0wrzcM...
CVE-2025-58089
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:39+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...
K000159628: Podman vulnerability CVE-2022-2739
Security Advisory Description The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker ...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
CVE-2025-58087
Talos reports multiple reflected XSS vulnerabilities in MedDream PACS Premium 7.3.6.870, affecting the config.php status parameter. The issue allows an attacker to craft a URL that injects arbitrary JavaScript, enabling arbitrary code execution in the browser. CVE-2025-58087 is among a set of XSS...
CVE-2025-58087
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...