490148 matches found
WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...
CVE-2026-71492
A flaw was found in Banks. The DirectoryPromptRegistry.set function improperly handles attacker-controlled Prompt.name and Prompt.version values. This allows for path traversal, enabling an attacker to write arbitrary files outside the intended registry root. This vulnerability could lead to...
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps
A practitioner’s guide to log visibility, incident readiness, and threat hunting across the major version control services...
CVE-2026-63632
A flaw was found in Open Neural Network Exchange ONNX. An out-of-bounds read can occur in the onnx.versionconverter.convertversion function when processing Gemm nodes with input tensors having fewer than two dimensions. This vulnerability, caused by a lack of rank checking, could allow an attacke...
CVE-2026-78285
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
CVE-2026-78286
Unauthenticated PHP Object Injection in Geo Controller = 8.9.8 versions...
CVE-2026-78289
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
CVE-2026-78288
Unauthenticated SQL Injection in Beautiful Taxonomy Filters = 2.4.6 versions...
CVE-2026-78292
Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...
CVE-2026-80433
Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...
CVE-2026-78274
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78281
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
CVE-2026-78276
Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78257
Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...
CVE-2026-32479
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...
RHSA-2026:57401 Red Hat Security Advisory: OpenShift Container Platform 4.19.44 packages and security update
Bulletin has no description...
EUVD-2026-66952
Subscriber Broken Access Control in Ditty = 3.1.67 versions...
CVE-2026-81272
CVE-2026-81272 affects the WordPress FluentPlayer Pro plugin in versions 1.3.2 and below , where an Editor-level Broken Access Control flaw allows a user with the Editor role to perform actions they should not be permitted to. The CVSS 3.1 score is 4.9 (MEDIUM) with the vector AV:N/AC:L/PR:H/UI:N...
