68039 matches found
GHSA-X6QJ-4H56-5RJ5
creationtimestamp| type| source ---|---|--- 2026-06-17 00:11:28+00:00| seen| https://gist.github.com/alon710/304448ca1233c754404dc0354510a0d3 2026-06-17 00:21:33+00:00| seen| https://gist.github.com/alon710/5a51983a1e4f931f3bc541f627d26823...
WordPress FireBox Popups – Increase Sales and Grow Your Email List plugin <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter vulnerability
Unauthenticated Sensitive Information Exposure in 'formid' Parameter vulnerability discovered by Duc Manh in WordPress Plugin FireBox versions = 3.1.7...
PT-2026-50481
Name of the Vulnerable Software and Affected Versions Open-webui affected versions not specified Description An authenticated user can access files belonging to other users by exploiting a lack of ownership verification in the image processing path. When the POST endpoint "/api/chat/completions"...
PT-2026-50595
Name of the Vulnerable Software and Affected Versions Daytona versions 0.101.0 through 0.184.0 Description A cross-tenant authorization flaw exists in the notification WebSocket gateway of the Daytona API service apps/api NestJS application. The JWT handshake joins a client-supplied organization...
Linux Distros Unpatched Vulnerability : CVE-2026-12310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. CVE-2026-12310...
CVE-2026-48929
Rocket.Chat versions older than 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, and 7.10.13 are vulnerable to unauthenticated file deletion through the deleteFileMessage Meteor method. When called over an unauthenticated DDP WebSocket connection, Meteor.userId() returns null, bypassing the auth...
CVE-2026-48929
Rocket.Chat in versions 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, and 7.10.13 is vulnerable to unauthenticated file deletion. The deleteFileMessage Meteor method permanently deletes any uploaded file by ID without requiring authentication. When called via an unauthenticated DDP WebSocket...
MINI-C496-2W45-R534
Bulletin has no description...
Malicious code in backoffice-charges-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047eb92a0e8bb401b2c205765616c9b4b715ee7cfd33d2e6ef9dc8d645b77f04 On every npm install, the preinstall lifecycle script node index.js /dev/null 2&1 silently HTTPS-POSTs a JSON payload to https://avamnrwqo7.rbmock.de...
CVE-2026-46938
CVE-2026-46938 entry includes a CVSS 3.1 base score of 7.2 (HIGH) with NETWORK attack vector, LOW attack complexity, no user interaction, and requiring HIGH privileges. Impact is HIGH across confidentiality, integrity, and availability. The description provides an Oracle security alert reference ...
CVE-2026-46930
Technical details for CVE-2026-46930 are not publicly available in the provided documents; monitor for updates.
CVE-2026-46921
...
CVE-2026-46861
Technical details about CVE-2026-46861 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46862
...
CVE-2026-46789
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46776
CVE-2026-46776 score and access profile are provided: CVSS v3.1 base score 8.6 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, NO user interaction, and UNCHANGED scope. Impact: Confidentiality LOW, Integrity HIGH, Availability LOW. No concrete affected products/v...
kernel: Buffer overflow in drivers/xen/sys-hypervisor.c
A flaw was found in the Linux kernel. A buffer overflow vulnerability exists in the Xen hypervisor driver drivers/xen/sys-hypervisor.c. This flaw occurs because the HYPERVISORxenversionXENVERbuildid function returns a build ID that is not properly null-terminated. When the buildidshow function...
kernel: Buffer overflow in drivers/xen/sys-hypervisor.c
A flaw was found in the Linux kernel. A buffer overflow vulnerability exists in the Xen hypervisor driver drivers/xen/sys-hypervisor.c. This flaw occurs because the HYPERVISORxenversionXENVERbuildid function returns a build ID that is not properly null-terminated. When the buildidshow function...