120833 matches found
PT-2026-76682
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description Users permitted to view group activity but restricted from seeing shared drafts can...
PT-2026-76869
Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists in the Text block/section functionality where a specifically crafted call allows the retrieval of backed-up content from a different Text section,...
CVE-2026-42163
Mahara (e-portfolio platform) before versions 25.04.5 and 26.04.0 allows unauthenticated attackers to gain unauthorized access to internal accounts through flaws in LTI 1.1 and LTI 1.3 Advantage integrations. CISA's SSVC assessment marks it "Automatable: yes" and "Technical Impact: total" but con...
PT-2026-73271
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
PT-2026-73266
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-73276
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-42164
Mahara (e-portfolio platform) versions before 25.04.5 and 26.04.0 have a flaw in the Text block/section functionality: a crafted call can recall backed-up content from another user's Text section. This enables unauthorized access to confidential data with integrity and availability impacts. CVSS ...
PT-2026-73337
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...
PT-2026-76752
Name of the Vulnerable Software and Affected Versions multicloud-operators-subscription affected versions not specified Description A flaw in the multicloud-operators-subscription component allows a user on a managed cluster to escalate privileges. By creating a Subscription with specifically...
PT-2026-73275
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-73272
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...
PT-2026-73277
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-76868
Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...
PT-2026-73278
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...
.NET: .NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
.NET: .NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
MINI-65Q8-XJQ9-HMRP
Bulletin has no description...
MINI-2C82-XVWG-QGRP
Bulletin has no description...
CVE-2026-73059 stoatchat before 0.15.0 Permission Bypass via message_fetch
stoatchat before 0.15.0 contains a permission bypass vulnerability in the messagefetch route that checks only ViewChannel permission instead of requiring ReadMessageHistory. Attackers with ViewChannel access but ReadMessageHistory denied can retrieve individual message content by ID, bypassing th...