262269 matches found
DEBIAN-CVE-2026-11853
Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages .dsc and upload artifacts .changes are manifest files that name the files that make up the artifact. The parser used to read these files in Debusine accepted arbitrary fully...
WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by dodoh4t in WordPress Plugin VikRentCar versions = 1.4.5...
CVE-2026-29116
creationtimestamp| type| source ---|---|--- 2026-06-10 09:26:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwfg2lrtr2y 2026-07-16 19:00:12+00:00| seen| Telegram/vFDO5SwsZ7hIMyqUKVS5e9UBDOzM5D4lILt5pmQlyCTvgM 2026-07-16 19:00:12+00:00| seen|...
CVE-2026-26241
creationtimestamp| type| source ---|---|--- 2026-06-10 08:51:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwdhhd6w72p 2026-06-14 23:16:49+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvnrzykg23 2026-06-15 16:31:20+00:00| seen|...
CVE-2026-8853
The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above,...
Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service
...
GHSA-QPGP-93VX-G8V8 vulnerabilities
Vulnerabilities for packages: logstash, gitlab-rails-ce, gitlab-cng, gitlab-rails-ce-fips, logstash-fips...
BELL-CVE-2026-46322
Bulletin has no description...
CVE-2026-11837
creationtimestamp| type| source ---|---|--- 2026-06-10 06:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnvzvhfhhz25 2026-06-10 06:00:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116724284473192022 2026-06-10 08:41:51+00:00| seen|...
EUVD-2026-35988
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any fil...
CVE-2026-9067 Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any fil...
MGASA-2026-0186 Updated libxpm packages fix security vulnerability
libXpm Out-of-bounds read in xpmNextWord. CVE-2026-4367...
MGASA-2026-0190 Updated golang-x-net packages fix security vulnerability
CVE-2024-45338 An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
Updated golang-x-net packages fix security vulnerability
CVE-2024-45338 An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
CVE-2025-59382
creationtimestamp| type| source ---|---|--- 2026-06-10 05:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvwmmlkfz2h 2026-06-17 12:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...
CVE-2025-66280
CVE-2025-66280 describes an integer overflow/wraparound vulnerability affecting several QNAP operating system versions. According to connected sources, a remote attacker who obtains an administrator account can exploit the flaw to compromise system security. Remediation is in fixed releases: QTS ...
EUVD-2025-210101
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...
CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1
CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1. An upgraded version of the package is available that resolves this issue...
