168324 matches found
CVE-2026-72810
SiYuan is affected by CVE-2026-72810: versions before 3.7.4 have a publish-boundary bypass in WebSocket broadcast sessions, allowing anonymous readers to receive unfiltered real-time edits including password-protected/forbidden documents without authentication. The issue is triggered via a WebSoc...
WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by hhhai in WordPress Plugin WP Sort Order versions = 1.3.5...
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...
WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions 4.16.6...
GO-2023-1723 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2026-4465 vulnerabilities
Vulnerabilities for packages: spicedb-fips, spicedb...
GO-2026-4779 vulnerabilities
Vulnerabilities for packages: minio, minio-fips...
GO-2024-2851 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2026-5528 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-3242 vulnerabilities
Vulnerabilities for packages: consul-fips, consul...
GO-2024-2597 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2024-2716 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2023-2166 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2024-2939 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2026-5609 vulnerabilities
Vulnerabilities for packages: openbao...
WordPress ProSolution WP Client plugin < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls vulnerability
Subscriber+ proSolajaxTablesync and proSolajaxClearlog Calls vulnerability discovered by Nir Yehoshua in WordPress Plugin ProSolution WP Client versions 2.0.9...
JLSEC-2026-1329 In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...
In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not...
EUVD-2026-58597
The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.2 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as confirmed and, in a...