2491 matches found
CVE-2025-13929: Allocation of Resources Without Limits or Throttling
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by issuing specially crafted requests to repository archive endpoints under certai...
MINI-RVRX-75FQ-R2R4
Bulletin has no description...
MINI-738P-2C22-5QHJ
Bulletin has no description...
CVE-2026-3582 Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scope
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token PAT lacking the repo scope to retrieve issues and commits from private and internal repositories via the search REST API endpoints. The user...
MINI-HRHV-47G2-5JQ7
Bulletin has no description...
MINI-856M-4XJ6-HCVX
Bulletin has no description...
PT-2026-24397
Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.20 GitHub Enterprise Server versions 3.16.15 through 3.16.15 GitHub Enterprise Server versions 3.17.12 through 3.17.12 GitHub Enterprise Server versions 3.18.6 through 3.18.6 GitHub Enterprise Serve...
MINI-PH27-WR67-CXHR
Bulletin has no description...
PT-2026-23686
ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to configurar perfil.php. Attackers can craft malicious forms or links containing parameters like usuario, contrasena1, contrasena2, nombre, an...
CVE-2026-29795: Allocation of Resources Without Limits or Throttling
stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::fromstr does not validate that the input length is within the declared maximum MAX. Calling StringM:: ::fromstrs where s is longer than N bytes succeeds and returns ...
CVE-2026-29077
Frappe (full‑stack web application framework) is affected by CVE-2026-29077 due to a lack of validation when sharing documents, enabling a user to share a document with a permission they themselves do not possess. Affected versions are prior to 15.98.0 and 14.100.0. The issue has been patched in ...
MINI-C95X-C5HR-25P9
Bulletin has no description...
delve security update
1.25.2-2.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-2 - Rebuild without changes. - Resolves: RHEL-153104...
CVE-2025-41257 Suprema BioStar 2 Insecure Password Change
Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise...
EUVD-2026-9503
Vaultwarden's Collection Management Operations Allowed Without manage Verification for Manager Role...
MINI-WRRW-74C4-48GP
Bulletin has no description...
MINI-W8PF-5G49-4MPM
Bulletin has no description...
MINI-VJ2R-WVQJ-5FVF
Bulletin has no description...