DRUPAL-CONTRIB-2026-179

This module enables REST endpoints for a decoupled Commerce experience which allow for remote order creation. The module doesn't sufficiently sanitize order data passed into the order creation endpoint, which allows for potentially unsafe order properties to be set on an order...

CVE-2025-15576

creationtimestamp| type| source ---|---|--- 2026-02-27 16:51:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-179 2026-02-28 16:20:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mfwmwwxhm22q...

MiracleLinux 4 : postgresql-8.4.20-3.AXS4 (AXSA:2015-179:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-179:02 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselect...

Wordfence Intelligence Weekly WordPress Vulnerability Report (December 1, 2025 to December 7, 2025)

Last week, there were 190 vulnerabilities disclosed in 173 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 59 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...

EUVD-2011-2735

Malware in sbrugna...

ni3ba45_marksheet (1.0.8), zain-khan-179-simple-calculator (>=1.0.0, <=2.1.0) potentially affected by unknown CVE via cahlk (0.0.1-security)

cahlk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cahlk and may be impacted: - ni3ba45marksheet 1.0.8 - zain-khan-179-simple-calculator =1.0.0, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16430...

[SECURITY] [DLA 3446-1] linux-5.10 security update

Debian LTS Advisory DLA-3446-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings June 05, 2023 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.179-1deb10u1 CVE ID : CVE-2023-0386 CVE-2023-31436 CVE-2023-32233 Debian Bug : 1035779 Several vulnerabilitie...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-179)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-179 advisory. qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX. CVE-2023-31436 Tenable has extracted the preceding description...

Upgraded Q -> 2 from #179 [1679871876484]

Judge has assessed an item in Issue 179 as 2 risk. The relevant finding follows: L-14 Lack of access control in setVault function leave it vulnerable to frontrunning attack --- The text was updated successfully, but these errors were encountered: All reactions...

Slackware Linux 14.2 openssl Multiple Vulnerabilities (SSA:2022-179-03)

The version of openssl installed on the remote host is prior to 1.0.2u. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-179-03 advisory. - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distribut...

CVE-2021-21679

Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

arrkannrv.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1127002 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting arrkannrv.com website and...

Design/Logic Flaw

cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...

CVE-2016-10779

CVE-2016-10779 affects cPanel prior to 60.0.25, with a stored XSS in api1_listautoresponders due to insufficient input validation in the web application. The vulnerability can lead to execution of client-side code in affected sessions. Remediation: upgrade to version 60.0.25 or later (as noted in...

CVE-2016-10779

cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...

CVE-2016-10779: Improper Neutralization of Input During Web Page Generation

cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...

Buffer overflow

eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution...

CVE-2019-10122: Out-of-bounds Write

eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution...

[SECURITY] [DLA 571-1] xen security update

Package : xen Version : 4.1.6.lts1-1 CVE ID : CVE-2014-3672 CVE-2016-3158 CVE-2016-3159 CVE-2016-3710 CVE-2016-3712 CVE-2016-3960 CVE-2016-4480 CVE-2016-6258 Debian Bug : Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifi...

Fedora 22 : xen (2016-8fd9019541)

in systemd only try to load kernel modules that are in Fedora 1291089 x86 software guest page walk PS bit handling flaw XSA-176, CVE-2016-4480 1332657 ---- create link to /usr/bin/qemu-system-i386 from /usr/lib/xen/bin for back compatibility and for virt-manager, cleaner fix for XSA-179 on...