145 matches found
CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...
CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: hubble, spire-controller-manager, sriov-network-device-plugin, kubescape-operator, pgtimetable, aws-sigv4-proxy, clickhouse-operator, spire-server, fuse-overlayfs-snapshotter, kubeflow-katib, crossplane-provider-aws-ec2, kubernetes-dashboard, wave, mods,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: glow, hubble, spire-controller-manager, tkn, clickhouse-operator, gcsfuse, kubeflow-katib, kubernetes-dashboard-auth, nuclei, tekton-chains, wire-go, kubernetes-dashboard, docker-cli-buildx, kpt, libnvidia-container, nginx-prometheus-exporter, nodetaint, fulcio, opa,...
CVE-2026-54307: Incorrect Authorization
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to...
PT-2026-41562
Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: trivy-operator, hubble, envoy-gateway, cert-exporter, infinispan-operator, clickhouse-operator, fuse-overlayfs-snapshotter, gcsfuse, k8sgpt-operator, argo-cd, mods, github-mcp-server, nginx-prometheus-exporter, k8ssandra-client, amazon-k8s-cni, redpanda, dask-gateway...
EUVD-2020-21857
Malware in sbrugna...
EUVD-2021-22163
Malware in sbrugna...
EUVD-2020-21870
Malware in sbrugna...
EUVD-2019-18400
Malware in sbrugna...
EUVD-2020-18479
Malware in sbrugna...
EUVD-2002-0232
Malware in sbrugna...
EUVD-2020-19128
Malware in sbrugna...
EUVD-2019-5899
Malware in sbrugna...
EUVD-2013-3567
Malware in sbrugna...
EUVD-2015-5163
Malware in sbrugna...
EUVD-2020-2567
Malware in sbrugna...