187011 matches found
CVE-2026-19895
CVE-2026-19895 affects open source POS Open Source Point of Sale, version up to 3.4.2. The vulnerability lies in Login::index (file app/Config/Filters.php, Login Endpoint), where excessive authentication attempts are improperly restricted. This allows a remote attack with high complexity; exploit...
CVE-2026-18500
CVE-2026-18500 concerns the @fastify/jwt plugin for Fastify. In versions before 10.2.2, a per-request key passed to request.jwtVerify({ key }) can be silently overridden by the plugin’s globally configured secret due to the option merge applying the global key last. This allows an ordinary authen...
CVE-2026-12795
A flaw was found in BerriAI litellm. This vulnerability allows a remote attacker to bypass authentication within the SSO Debug Flow component by manipulating the json.dumps function. The successful exploitation of this flaw could lead to unauthorized access and potential information disclosure...
MINI-HRCC-C7VX-FJ35
Bulletin has no description...
CVE-2026-18654 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-43975 vulnerabilities
Vulnerabilities for packages: geoserver...
CVE-2020-0228
creationtimestamp| type| source ---|---|--- 2026-08-15 08:00:11+00:00| seen| Telegram/tpKn25chglz1Cvi4exaSjR3xVCVPiynHFcxGRPE3yrafOA 2026-08-15 08:00:12+00:00| seen| Telegram/IcumU2Dn789Qi8XnTXdSNFGPLRC7M3SjpeamJGuc-P0nHQ 2026-08-16 00:00:10+00:00| published-proof-of-concept|...
MINI-7546-PJ6G-C33V
Bulletin has no description...
MINI-6M5F-R8M6-RFVW
Bulletin has no description...
MINI-GWGP-H24X-Q3CG
Bulletin has no description...
MINI-J2MC-P5X4-22XH
Bulletin has no description...
MINI-4PGH-6J25-G227
Bulletin has no description...
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre NCSC-NL has warned. The vulnerability in question is CVE-2026-65400 CVSS score: 9.8, a critical authentication issue...
CVE-2026-15826
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppbloginuser function calling absint on the return value of wpinsertuser before performing an iswperror check — when a registration...
CVE-2026-15826 User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppbloginuser function calling absint on the return value of wpinsertuser before performing an iswperror check — when a registration...
CVE-2026-15826
The User Profile Builder WordPress plugin (≤ 3.16.4) is vulnerable to unauthenticated authentication bypass via type confusion , rated CVSS 9.8 Critical . The root cause is in wppb_log_in_user(), which calls absint() on the return value of wp_insert_user() before the is_wp_error() check. A regist...
CVE-2026-15826
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppbloginuser function calling absint on the return value of wpinsertuser before performing an iswperror check — when a registration...
EUVD-2026-59593
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppbloginuser function calling absint on the return value of wpinsertuser before performing an iswperror check — when a registration...
UBUNTU-CVE-2026-72044
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2026-72130
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default states, th...