275 matches found
CVE-2026-39830 affecting package telegraf for versions less than 1.31.0-21
CVE-2026-39830 affecting package telegraf for versions less than 1.31.0-21. A patched version of the package is available...
CVE-2026-48906
CVE-2026-48906 affects the Tassos Framework Plugin (Novarain/Tassos Framework) used with Joomla. The CVE records describe an arbitrary file deletion vulnerability in the plugin prior to version 6.1.0, enabling deletion of arbitrary files on affected sites. The CVSS analysis indicates remote acces...
CVE-2026-37459 affecting package frr for versions less than 10.5.4-1
CVE-2026-37459 affecting package frr for versions less than 10.5.4-1. A patched version of the package is available...
CVE-2026-24072 affecting package httpd for versions less than 2.4.67-1
CVE-2026-24072 affecting package httpd for versions less than 2.4.67-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-32936 affecting package coredns for versions less than 1.11.4-16
CVE-2026-32936 affecting package coredns for versions less than 1.11.4-16. A patched version of the package is available...
CVE-2026-41604 affecting package thrift for versions less than 0.15.0-6
CVE-2026-41604 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...
NPM: Open WebUI Has Stored Cross-Site Scripting in SVG Renderer
NPM: Open WebUI Has Stored Cross-Site Scripting in SVG Renderer vulnerability discovered by ? in WordPress Npm open-webui versions 0.6.31...
WordPress SureTriggers plugin < 1.1.23 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by mcdruid in WordPress Plugin OttoKit versions 1.1.23...
CVE-2026-34001 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-4
CVE-2026-34001 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-4. A patched version of the package is available...
CVE-2026-41411 affecting package vim for versions less than 9.2.0392-1
CVE-2026-41411 affecting package vim for versions less than 9.2.0392-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-22336
CVE-2026-22336 affects the WordPress plugin Directorist Booking. It exposes an unauthenticated SQL Injection in versions up to 2.4.1, arising from improper neutralization of input used in SQL commands. Impact per sources is high: potential data disclosure or manipulation with no user interaction ...
Microsoft Edge (Chromium) < 147.0.3912.86 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 147.0.3912.86. It is, therefore, affected by multiple vulnerabilities as referenced in the April 24, 2026 advisory. - Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who ha...
nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields
In versions middleware. Any user authenticated on the configured guard could call the endpoint and flip boolean attributes on any Nova resource — including users who do not have access to Nova itself for example, frontend customers sharing the web guard with the Nova admin area. The endpoint also...
CVE-2026-33947 affecting package jq for versions less than 1.7.1-5
CVE-2026-33947 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-39979 affecting package jq for versions less than 1.7.1-5
CVE-2026-39979 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-32316 affecting package jq for versions less than 1.7.1-5
CVE-2026-32316 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
PT-2026-33067
Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 1.0.3 Description A user with a role that has access to the Splunk internal index or the high-privilege capability mcp tool admin can view user session and authorization tokens in clear text. This issue...