21 matches found
CVE-2026-26885
Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...
CVE-2022-26885
When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher...
CVE-2025-26885
Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant: from n/a through = 1.5.1...
CVE-2025-26885
creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6219 2026-05-28 09:03:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmvnznhbnr2w...
CVE-2025-26885
CVE-2025-26885 is a deserialization of untrusted data vulnerability in the Beaver Builder WordPress Assistant plugin (Assistant) <= 1.5.1. Root cause: PHP object injection via deserialization of untrusted data. Affected software: WordPress plugin Assistant – from n/a through
CVE-2025-26885 WordPress Assistant Plugin <= 1.5.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant: from n/a through = 1.5.1...
Ubuntu: Security Advisory (USN-7088-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2135-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2135-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securit...
CVE-2024-26885 affecting package kernel for versions less than 6.6.29.1-3
CVE-2024-26885 affecting package kernel for versions less than 6.6.29.1-3. An upgraded version of the package is available that resolves this issue...
CVE-2024-26885
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the maxentries value provided when creating the map. When rounding up to the next power of two,...
CVE-2024-26885 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the maxentries value provided when creating the map. When rounding up to the next power of two,...
CVE-2022-26885
creationtimestamp| type| source ---|---|--- 2022-11-24 18:14:35+00:00| seen| https://t.me/cibsecurity/53481 2025-04-25 19:07:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13508...
CVE-2022-26885
Apache Dolphin Scheduler is affected by CVE-2022-26885, where using tasks to read config files can disclose database passwords. The issue stems from improper handling of logs in LoggerRequestProcessor.java, per Veracode and related advisories. Affected product: Dolphin Scheduler server; vulnerabi...
CVE-2022-26885 Apache DolphinScheduler config file read by task risk
When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher...
CVE-2022-26885 Apache DolphinScheduler config file read by task risk
When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher...
CVE-2020-26885
The CVE-2020-26885 entry relates to 2sic 2sxc prior to version 11.22, where an XSS vulnerability exists in the sxcver parameter of dnn/ui.html. The issue allows an attacker to craft a malicious URL that executes JavaScript in a victim’s browser. Public details indicate impact is limited to the br...
CVE-2021-26885 Windows WalletService Elevation of Privilege Vulnerability
...
CVE-2021-26885
CVE-2021-26885 is a Windows WalletService elevation of privilege vulnerability described as a local privilege escalation that could impact a system’s confidentiality, integrity and availability. The public documents identify the affected component as Windows WalletService and classify the vulnera...
KB5000807: Windows 10 March 2021 Security Update
The remote Windows host is missing security update 5000807. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-26862, CVE-2021-26866, CVE-2021-26868, CVE-2021-26871,...
KB5000808: Windows 10 Version 1909 March 2021 Security Update
The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...