CVE-2025-36335 Vulnerabilities found

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user...

CVE-2025-36335

CVE-2025-36335 affects IBM watsonx.data intelligence releases 5.2.0, 5.2.1, 5.3.0, and 5.3.1. The root cause is that user credentials are stored in plain text, allowing a local user to read them. This leads to confidentiality impact (high) per the CVSS metrics, with access restricted to local con...

CVE-2022-50993

creationtimestamp| type| source ---|---|--- 2026-04-30 21:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqjdb6oy52q 2026-04-30 21:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqjjy7seh2e 2026-05-15 00:00:00+00:00| seen| The Shadowserver...

CVE-2022-50992

creationtimestamp| type| source ---|---|--- 2026-04-30 20:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqikfiedi2v 2026-04-30 21:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkdmhs2v2t 2026-07-08 01:03:22+00:00| exploited|...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation through the AuthHelper SSO setup flow in the auth helper pipeline. An attacker can link a Sentry account to a different identity by supplying an IdP assertion email that resolves to another user during provider setup...

GHSA-RCMW-7MC7-3RJ7 Sentry's improper authentication on SAML SSO process allows user identity linking

Impact A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via Sentry's private bug bounty program. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the sa...

Sentry's improper authentication on SAML SSO process allows user identity linking

Impact A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via Sentry's private bug bounty program. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the sa...

CVE-2026-33845

creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqew3q7bq2q 2026-04-30 21:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqjro36u22i 2026-05-19 20:10:47+00:00| seen|...

CVE-2026-40600

creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqevv52ge2t 2026-04-30 20:41:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqhzgj7gn2h...

CVE-2026-40595

creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqevntsov2r 2026-04-30 21:51:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkqlwhmhop2f...

CVE-2026-40904

creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdhe6gww2n 2026-04-30 21:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkmlikdx2p...

GHSA-32PX-CCFX-CXQ3 Krayin CRM allows a remote attacker to execute arbitrary code via compose email function

An issue in Krayin CRM v.2.1.5, which was fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function...

CVE-2026-36959

creationtimestamp| type| source ---|---|--- 2026-04-30 17:25:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq52xwf6d2p 2026-04-30 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq62mg5c72l...

CVE-2026-36956

creationtimestamp| type| source ---|---|--- 2026-04-30 17:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq4rz5rue2o 2026-04-30 18:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq6z6o7td2r...

OPENSUSE-SU-2026:20658-1 Security update for himmelblau

This update for himmelblau fixes the following issues: Update to version 2.3.9+git0.a9fd29b. Security issues fixed: - CVE-2026-34397: Fixed naming collision that can lead to local privilege escalation bsc1261324. Other updates and bugfixes: - update aws-lc-sys to 0.39.0 for security fixes - updat...

CVE-2025-14543

creationtimestamp| type| source ---|---|--- 2026-04-30 17:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq3x5na4h2v 2026-04-30 17:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq4a42tnw2q...

CLSA-2026-1777568294 python2: Fix of CVE-2026-6100

CVE-2026-6100: defensively null bzs-nextin on the error path of BZ2Decompdecompress to align with upstream; the UAF window does not exist in Python 2.7 nextin is reassigned at function entry, lzma/gzip are not C extensions...

CVE-2026-7246

creationtimestamp| type| source ---|---|--- 2026-04-30 16:24:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkpzngsdew2e 2026-04-30 16:43:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq2pv4gbi2e...

CVE-2026-36340

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function...

Hackers stole hundreds of thousands of Roblox accounts: Here’s what to do

More than 610,000 Roblox accounts were reportedly stolen. Was yours or your child's among them? Ukrainian police arrested three individuals in Lviv who allegedly orchestrated one of the largest Roblox account theft operations to date. Between October 2025 and January 2026, the hacking group is sa...