11596 matches found
GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, syncthing, spegel, kubernetes-dns-node-cache, ipfs-cluster, teleport-operator-fips, kyverno-policy-reporter-plugins-trivy, kubedock-fips, kubernetes-dns-node-cache-fips, kubo-fips, kyverno-policy-reporter-plugins-trivy-fips, kargo, frp,...
CVE-2026-40898 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, syncthing, spegel, kubernetes-dns-node-cache, ipfs-cluster, teleport-operator-fips, kyverno-policy-reporter-plugins-trivy, kubedock-fips, kubernetes-dns-node-cache-fips, kubo-fips, kyverno-policy-reporter-plugins-trivy-fips, kargo, frp,...
Insufficient Verification of Data Authenticity
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the processPayment.json.php process. An attacker can increase their own wallet balance by submitting arbitrary...
irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-48710 via starlette (0.31.0)
starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-487...
PT-2026-46380
Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...
PT-2026-46382
Unauthenticated Privilege Escalation in Support Ticket Management System = 1.9 versions...
PT-2026-46333
Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...
PT-2026-46364
Unauthenticated Local File Inclusion in Gita = 1.11 versions...
PT-2026-46352
Unauthenticated Local File Inclusion in Mission = 1.22 versions...
PT-2026-46343
Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...
PT-2026-46387
Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...
PT-2026-46357
Unauthenticated Local File Inclusion in Quirky = 1.23 versions...
PT-2026-46338
Unauthenticated Local File Inclusion in Deliciosa = 1.10.0 versions...
PT-2026-46355
Unauthenticated Local File Inclusion in Dom = 1.24 versions...
PT-2026-46370
Unauthenticated Local File Inclusion in Gunslinger = 1.7 versions...
PT-2026-46344
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...
PT-2026-46361
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...
PT-2026-46377
Unauthenticated Local File Inclusion in Etude = 1.6 versions...