490155 matches found
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (>=1.5.40, <=1.5.43) +26 more potentially affected by CVE-2026-76172 via fast-uri (>=3.0.1, <=3.1.5)
fast-uri NPM version =3.0.1, =0.3.1, =1.5.40, =1.6.0, =1.4.2, =1.2.0, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2026-76172 Source advisory: SNYK:JS-FASTURI-19256869...
MAL-2026-14444 Malicious code in msrcpoc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57de2918e25798c84b17d6a743fbadb99a5e564b8ea34e1ab5d4a0ff6d509df0 The OpenSSF Package Analysis project identified 'msrcpoc' @ 99.1.9 pypi as malicious. It is considered malicious because: - The package executes...
CVE-2026-78247
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ugur Ozer in WordPress Plugin AutomatorWP versions = 5.8.3...
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by ChuongVN in WordPress Plugin TranslatePress versions = 3.3.2...
ROOT-APP-MAVEN-CVE-2018-5968 CVE-2018-5968 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2018-5968 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2020-36181 CVE-2020-36181 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2020-36181 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2017-15095 CVE-2017-15095 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2017-15095 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
squid SQUID_7_7
SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - PHP Object Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...
CVE-2026-78277
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
CVE-2026-78278
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78279
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78290
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...
CVE-2026-78258
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...
CVE-2026-66623
Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...
CVE-2026-66610
Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...
CVE-2026-66671
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...