5631 matches found
CVE-2026-32489: Missing Authorization
Missing Authorization vulnerability in bPlugins B Blocks b-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Blocks: from n/a through 2.0.30...
WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by w41bu1 in WordPress Plugin B Blocks versions 2.0.30...
HPESBST05000 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities
Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - Prior to v2.4.0b CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-12679 |...
The vulnerability of the `scrub_find_fill_first_stripe()` function in the `fs/btrfs/scrub.c` file of the btrfs file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the scrubfindfillfirststripe function in the fs/btrfs/scrub.c file of the btrfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Malicious Package
Overview sap-b is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005551 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential null-ptr-deref in nilfsbtreeinsert Patch series nilfs2: fix potential issue...
keycloak: Incorrect ownership checks in /uma-policy/
A flaw was found in Keycloak. A significant Broken Access Control vulnerability exists in the UserManagedPermissionService UMA Protection API. When updating or deleting a UMA policy associated with multiple resources, the authorization check only verifies the caller's ownership against the first...
CVE-2026-20704
Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed...
CVE-2026-22550
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution...
CVE-2026-22550
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution...
CVE-2026-20704
Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed...
CVE-2026-24449
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information...
EUVD-2026-5271
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information...
CVE-2026-24449
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information...
CVE-2026-24449
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information...
CVE-2026-24449
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information...
CVE-2026-24449
CVE-2026-24449 affects WRC- X1500GS-B and WRC-X1500GSA-B. The initial passwords can be calculated from system information, indicating weak default credential handling. The available documents confirm affected devices and the easy-recovery of initial passwords; no public details on a fix or update...
CVE-2026-22550
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution...