CVE-2023-40362

CVE-2023-40362 CVE-2023-40362 脆弱性の詳細と概念実証。 概要 Click2Gov BPのURI /Click2GovBP/mastercontractorlist.htmlにおけるアクセス制御の脆弱性により、認証済みユーザーが被害者のユーザーIDと削除対象の契約業者の情報を用いて、他のユーザーのアカウントから契約業者を削除できるようになります。 これは、指定されたユーザーIDのアカウントから契約業者を削除する権限がユーザーにあるかどうかをWebアプリケーションが検証しないことに起因します。 ベンダー : CentralSquare 報告者 : Ally...

CVE-2026-63563

CVE-2026-63563 - Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers Sharp MX/BP多機能プリンター上の認証未完でのアドレス帳改ざん ベンダー勧告: Sharp Product Security Advisory 2026-004 2026/7/31公開 要約 Sharp MX/BP...

PT-2026-93565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM s390 architecture, a memory leak occurs in the guest debug error path. The import wp info function allocates an old data buffer for each watchpoint to back up original guest...

PT-2026-93543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture where the do bp function can reach kprobe singlestep handler even when no active probe is present, because userspace can issue the same brea...

CVE-2026-84812

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

CVE-2026-84812 WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

EUVD-2026-70570

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

CVE-2026-84812 WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

CVE-2026-84812

CVE-2026-84812 affects the WordPress BP Better Messages plugin in versions

CVE-2026-84812: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

PT-2026-85116

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BP Better Messages versions = 2.15.27...

PT-2026-79650

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: error out for 10000 active mem bp damos quota score can trigger division by zero if the target value is zero. DAMON LRU SORT lets users set the target value for the hot memory scheme via active mem bp parameter...

CVE-2026-32547

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

CVE-2026-32547 WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

CVE-2026-32547

BP Better Messages plugin (WordPress) ≤ 2.15.22 has an unauthenticated reflected/stored XSS flaw; attacker-supplied input is not sanitized before output, enabling script injection. CVSS 7.1 (High). Patchstack advisory: https://patchstack.com/database/wordpress/plugin/bp-better-messages/vulnerabil...

CVE-2026-32547

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

EUVD-2026-60910

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

CVE-2026-32547 WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BP Better Messages versions = 2.15.22...