261710 matches found
EUVD-2026-47654
Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authentication Bypass. This issue affects IDM-MFA: from 2025.11.27 before 2026.03.10...
CVE-2026-65594 n8n before 2.30.1 Missing OAuth Authorization Check
n8n before 2.29.8 and 2.30.x before 2.30.1 affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was introduced does not verify that the authenticated user has access to the workflow referenced as the OAuth resource. On instances with at least one active MCP Server Trigger...
New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control
A vulnerability in snap-confine lets an unprivileged user gain root access on affected Ubuntu Desktop systems. Install the latest snapd update to fix the issue...
ROOT-APP-NPM-CVE-2026-27699 CVE-2026-27699 in @rootio/basic-ftp - Patched by Root
Root has patched CVE-2026-27699 in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...
Important: Red Hat Security Advisory: evince security update
An update for evince is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
ROOT-APP-NPM-CVE-2020-7660 CVE-2020-7660 in @rootio/serialize-javascript - Patched by Root
Root has patched CVE-2020-7660 in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...
CVE-2026-63048
creationtimestamp| type| source ---|---|--- 2026-07-22 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr7wezhseo2r 2026-07-22 08:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7wyuajaw23 2026-07-22 09:00:33+00:00| seen|...
CVE-2026-63047
The CVE-2026-63047 vulnerability affects the Joomla extension Events Booking prior version 5.0-5.8.1, where an ACL/permissions check failed to properly verify that an actor is allowed to download invoice information. The underlying issue is an improper access-control check that could enable exfil...
BELL-CVE-2026-23992
Bulletin has no description...
BELL-CVE-2026-64165
Bulletin has no description...
BELL-CVE-2026-64151 CVE-2026-64151 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63955 CVE-2026-63955 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64115
Bulletin has no description...
BELL-CVE-2026-63975
Bulletin has no description...
BELL-CVE-2026-64113
Bulletin has no description...
CVE-2026-12987
The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-User-Account Booking Mode: a booker-supplied registration field is stored as booking meta and later deserialized without restricting allowed classes, enabling PHP object injection...
CVE-2026-16381
creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:51+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 18:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraxl72u4x2a...
CVE-2026-16373
creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:33+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...
CVE-2026-16360
creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrarcw7nvk2a...
CVE-2026-16356
creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:52+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqy7w7yy22...