CVE ID :CVE-2026-48150 Published : May 27, 2026, 6:16 p.m. | 1 hour, 26 minutes ago Description :Budibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is guarded by the builderOrAdmin middleware, which passes any user who is a builder for…
CVE ID :CVE-2026-48152 Published : May 27, 2026, 6:16 p.m. | 1 hour, 26 minutes ago Description :Budibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT routes are guarded by generic TABLE READ, not by Builder/Admin permission…
CVE ID :CVE-2026-48153 Published : May 27, 2026, 6:16 p.m. | 1 hour, 26 minutes ago Description :Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping…
CVE ID :CVE-2026-8890 Published : May 26, 2026, 7:16 p.m. | 22 minutes ago Description :code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted JSON payload in the…
CVE ID :CVE-2026-3660 Published : May 26, 2026, 7:16 p.m. | 22 minutes ago Description :IBM Engineering Lifecycle Management 7.0.3 ( through ) Interim Fix 021, 7.1.0 ( through ) Interim Fix 009, and 7.2.0 ( through ) Interim Fix 001…
CVE ID :CVE-2026-9560 Published : May 26, 2026, 6:16 p.m. | 1 hour, 21 minutes ago Description :Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC…
CVE ID :CVE-2026-8855 Published : May 26, 2026, 6:16 p.m. | 1 hour, 21 minutes ago Description :IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication). Severity:…
CVE ID :CVE-2026-8834 Published : May 26, 2026, 6:16 p.m. | 1 hour, 21 minutes ago Description :IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to execute…
CVE ID :CVE-2018-25379 Published : May 25, 2026, 2:15 p.m. | 5 hours, 18 minutes ago Description :Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attackers…
CVE ID :CVE-2018-25377 Published : May 25, 2026, 2:15 p.m. | 5 hours, 18 minutes ago Description :Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured…