167212 matches found
CVE-2025-68045 WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.12 versions...
CVE-2025-68045
CVE-2025-68045 concerns the WordPress WP Event Solution plugin, affected versions
USN-8349-3: rsync regression
USN-8349-1 fixed vulnerabilities in rsync. Unfortunately that update introduced multiple regressions in rsync functionality. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Calum Hutton discovered that rsync contained a heap-based out-of-bounds read...
PT-2026-50124
Name of the Vulnerable Software and Affected Versions JobSearch versions prior to 3.2.8 Description Unauthenticated Broken Access Control allows an attacker to bypass authorization restrictions without providing valid credentials. Recommendations Update to a version newer than 3.2.7...
Linux Distros Unpatched Vulnerability : CVE-2026-47261
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all and FilePerms::READ...
PT-2026-50139
Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0 Description The /api/v1/monitor router exposes seven endpoints that allow read, write, and delete operations on user-owned resources, including messages, sessions, build artifacts, and LLM transaction logs. The...
PT-2026-49824
Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.5 Description Improper access control in the social login connection endpoint allows an authenticated vault member to enumerate social login entry metadata to which they are not authorized by using a crafted A...
Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users...
EUVD-2026-36977
Unauthenticated Broken Access Control in wpForo Forum 3.0.2 versions...
EUVD-2026-36998
Subscriber Broken Access Control in Amelia = 2.2 versions...
EUVD-2026-36997
Subscriber Broken Access Control in myCred = 3.0.3 versions...
EUVD-2026-36988
Unauthenticated Broken Access Control in WPAdverts = 2.3.0 versions...
EUVD-2026-36984
Unauthenticated Broken Access Control in Royal MCP = 1.4.2 versions...
EUVD-2026-36996
Subscriber Broken Access Control in Groundhogg 4.4.1 versions...
EUVD-2026-36985
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...
EUVD-2026-36983
Unauthenticated Broken Access Control in Booking Package = 1.7.06 versions...
EUVD-2026-36991
Subscriber Broken Access Control in ChatBot = 7.9.7 versions...
EUVD-2026-36963
Unauthenticated Broken Access Control in WP Directory Kit = 1.5.0 versions...