6448 matches found
CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5
CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5. A patched version of the package is available...
CVE-2026-32776 affecting package expat for versions less than 2.6.4-5
CVE-2026-32776 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...
CVE-2026-21715 affecting package nodejs for versions less than 20.14.0-15
CVE-2026-21715 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...
CVE-2026-21714 affecting package nodejs for versions less than 20.14.0-15
CVE-2026-21714 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...
CVE-2026-33554 affecting package freeipmi for versions less than 1.6.17-1
CVE-2026-33554 affecting package freeipmi for versions less than 1.6.17-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-21716 affecting package nodejs for versions less than 20.14.0-15
CVE-2026-21716 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...
CVE-2026-32778 affecting package expat for versions less than 2.6.4-5
CVE-2026-32778 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...
CVE-2026-40030
Technical details about CVE-2026-40030 are not provided in the connected documents. Public specifics (affected components, root cause, fixes) are unavailable here; monitor for updates.
EUVD-2026-20457
Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...
CVE-2026-5302
CORS misconfiguration in CoolerControl/coolercontrold 4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites...
EUVD-2026-20455
Command injection in alerts in CoolerControl/coolercontrold 4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names...
WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hitek versions 1.8.3...
WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Getaway versions 1.8...
EUVD-2026-20152
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-39506
Missing Authorization vulnerability in Jordy Meow AI Engine Pro ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine Pro: from n/a through 3.4.2...
CVE-2026-39484 WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-39484
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-1839
A flaw was found in HuggingFace Transformers. A remote attacker can exploit this vulnerability by supplying a specially crafted checkpoint file e.g., rngstate.pth. The loadrngstate method in the Trainer class loads this file using torch.load without proper validation, specifically missing the...
EUVD-2026-19610
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...