490153 matches found
CVE-2026-56704
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
SUSE CVE-2026-75038
UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...
EUVD-2026-65176
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
EUVD-2026-65159
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
EUVD-2026-65173
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
EUVD-2026-65164
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
EUVD-2026-65161
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
EUVD-2026-65170
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
EUVD-2026-65172
Unauthenticated PHP Object Injection in The Events Calendar = 6.17.2 versions...
EUVD-2026-65168
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
EUVD-2026-65163
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
EUVD-2026-65162
Unauthenticated SQL Injection in Boost = 2.0.4 versions...
EUVD-2026-65171
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
EUVD-2026-65174
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
OpenSSL Toolkit 4.0.2
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 4.0 release...
CVE-2026-79787: Improper Authentication
Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...
PT-2026-81131
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
EUVD-2026-66178
aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...
Oracle Linux 8 : python3.12 (ELSA-2026-58971)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58971 advisory. 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227198 Tenable has extracted the preceding description block directly from the Oracle Linux security...
