1622 matches found
CVE-2024-23518
Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6...
CVE-2024-32094
Cross-Site Request Forgery CSRF vulnerability in ChurchThemes Church Content – Sermons, Events and More.This issue affects Church Content – Sermons, Events and More: from n/a through 2.6...
CVE-2024-25098
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pascal Bajorat PB oEmbed HTML5 Audio – with Cache Support allows Stored XSS.This issue affects PB oEmbed HTML5 Audio – with Cache Support: from n/a through 2.6...
CVE-2023-39926
Unauth. Stored Cross-Site Scripting XSS vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin = 2.6 versions...
CVE-2023-26781
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
CVE-2019-1010003
Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...
CVE-2025-47648
Cross-Site Request Forgery CSRF vulnerability in axima Pays – WooCommerce Payment Gateway axima-payment-gateway allows Stored XSS.This issue affects Pays – WooCommerce Payment Gateway: from n/a through = 2.6...
PT-2025-17199 · Jetbrains · Jetbrains Toolbox App
Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns unencrypted credential transmission during SSH authentication. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...
DEBIAN-CVE-2025-3001
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstmcell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...
CVE-2025-28900
Cross-Site Request Forgery CSRF vulnerability in webgarb TabGarb Pro tabgarb allows Stored XSS.This issue affects TabGarb Pro: from n/a through = 2.6...
CVE-2025-28900
Cross-Site Request Forgery CSRF vulnerability in webgarb TabGarb Pro tabgarb allows Stored XSS.This issue affects TabGarb Pro: from n/a through = 2.6...
CVE-2025-28900 WordPress TabGarb Pro plugin <= 2.6 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in webgarb TabGarb Pro tabgarb allows Stored XSS.This issue affects TabGarb Pro: from n/a through = 2.6...
CVE-2025-28900
CVE-2025-28900 pertains to the WordPress plugin TabGarb Pro (
Nothing OS 安全漏洞
Nothing OS is an operating system from Nothing. A security vulnerability exists in Nothing OS version 2.6, which stems from a flaw in the NtBpfService component that could lead to elevated privileges for a local attacker...
PT-2025-6707 · Nothing Tech · Nothing Os
Name of the Vulnerable Software and Affected Versions: Nothing Tech Nothing OS version 2.6 Description: The issue allows a local attacker to escalate privileges via the NtBpfService component. Recommendations: For Nothing Tech Nothing OS version 2.6, at the moment, there is no information about a...
CVE-2024-0818
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6...
PT-2025-5104 · WordPress · Wp Service Payment Form With Authorize.Net
Name of the Vulnerable Software and Affected Versions: WP Service Payment Form With Authorize.net versions n/a through 2.6.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended...
Wireshark SEoL (2.6.x)
According to its version, Wireshark is 2.6.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...
PT-2024-10981 · Chatwoot · Chatwoot
Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.6 Description: A stored cross-site scripting XSS vulnerability was discovered, affecting the profile settings when a user uploads an SVG file containing a malicious XSS payload. When the avatar is opened ...