261542 matches found
Progress Kemp Flowmon - Command Injection
In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands. id: CVE-2024-2389 info: nam...
CVE-2025-15678 Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload
The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files Author by default, allowing them to upload a file containing malicious JavaScript that executes when the file is accessed, leading to Stored Cross-Site...
CVE-2026-16065
CVE-2026-16065 affects the Welcart e-Commerce WordPress plugin prior to 2.11.32. The issue is a lack of sanitisation of a value from an imported CSV file used in a SQL statement, enabling SQL injection by users with Editor role or higher (including custom shop-management roles). Reported CVSSv3.1...
CVE-2026-16954 AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens
The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and authentication tokens in cleartext, despite those secrets being...
CVE-2026-16734
The CVE concerns the Stripe Payment Forms by WP Full Pay WordPress plugin (before version 8.5.2). Two unauthenticated payment-form AJAX actions do not verify ownership of the referenced Stripe payment intent, enabling an unauthenticated visitor (with a page-embedded nonce) to alter the payment am...
CVE-2026-19005 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...
CVE-2026-18967
A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the IdP-Initiated flow, Keycloak fails to enforce the OneTimeUse condition in SAML assertions. This allows an attacker who captures a valid, unused asserti...
CVE-2026-20270
creationtimestamp| type| source ---|---|--- 2026-08-06 05:17:11+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260806 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m 2026-08-13 06:07:06+00:00| seen|...
CVE-2026-64537
creationtimestamp| type| source ---|---|--- 2026-08-06 05:16:07+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
ROOT-OS-DEBIAN-12-CVE-2026-64547 CVE-2026-64547 in linux - Patched by Root
Root has patched CVE-2026-64547 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43161 CVE-2026-43161 in linux - Patched by Root
Root has patched CVE-2026-43161 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-53002 CVE-2026-53002 in linux - Patched by Root
Root has patched CVE-2026-53002 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-53224 CVE-2024-53224 in linux - Patched by Root
Root has patched CVE-2024-53224 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39846 CVE-2025-39846 in linux - Patched by Root
Root has patched CVE-2025-39846 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38659 CVE-2025-38659 in linux - Patched by Root
Root has patched CVE-2025-38659 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43089 CVE-2026-43089 in linux - Patched by Root
Root has patched CVE-2026-43089 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39763 CVE-2025-39763 in linux - Patched by Root
Root has patched CVE-2025-39763 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-26661 CVE-2024-26661 in linux - Patched by Root
Root has patched CVE-2024-26661 in the linux package for Root:Debian:12. Multiple fixed versions available...