CVE-2026-18387 Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'tagquery' parameter in all versions up to, and including, 4.5.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

MINI-6RFQ-CPM8-QV2W

Bulletin has no description...

CVE-2026-24882 vulnerabilities

Vulnerabilities for packages: gnupg...

MINI-Q35P-64XQ-GV4H

Bulletin has no description...

MINI-V49X-24JF-MPVF

Bulletin has no description...

MINI-94WG-G43X-Q7RJ

Bulletin has no description...

MINI-G5MW-R9GF-V98M

Bulletin has no description...

MINI-FJM6-3WQ8-XFWQ

Bulletin has no description...

EUVD-2026-58813

OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...

PT-2026-72889

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection flaw exists in the /viewmedicine.php file. The issue occurs when the delid argument is manipulated, allowing an attacker to execute arbitrary SQL commands o...

Linux Distros Unpatched Vulnerability : CVE-2026-68476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may reallocate skb-head. CVE-2026-68476 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-72130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches...

Linux Distros Unpatched Vulnerability : CVE-2026-74511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix pending command UAF in EIR updates MGMTOPSETLOCALNAME is handled asynchronously on powered controllers and can run setnamesync. When the...

PT-2026-73066

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A remote SQL injection is possible due to improper handling of the proId argument within an unknown function in the '/action.php' endpoint. SQL injection is a technique where an...

PT-2026-73046

Name of the Vulnerable Software and Affected Versions Jinher OA version 1.0 Description A SQL injection flaw exists in the file /C6/JHSoft.Web.HrmAttendance/attendance out approve.aspx. A remote attacker can exploit this by manipulating the httpOID argument. SQL injection is a technique where...

PT-2026-73038

Name of the Vulnerable Software and Affected Versions VictoriaMetrics versions prior to 1.147.0 Description An issue exists in the VMAuth Authentication Endpoint within the requestHandler function of the app/vmauth/main.go file. A remote attacker can perform a manipulation that leads to improper...

PT-2026-72280

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the drm sched worker of the Linux kernel. The issue occurs when amdxdna drm submit execbuf passes a user-supplied command BO handle to amdxdna cmd...

PT-2026-73039

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within an unknown function in the /edit teacher.php file. SQL injection is a technique wher...

PT-2026-73040

Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description An issue exists where the file /etc/shadow contains hard-coded credentials. This allows a remote attacker to potentially gain unauthorized access, although the attack requires a high degree of...

PT-2026-73043

Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description An issue exists within the SQL Database Backup component, specifically affecting the /db/shopping.sql file. This flaw allows remote attackers to access files or directories through...