14501 matches found
CVE-2026-15450
The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3. This is due to the deletefile AJAX handler retrieving a file path from the database and passing it directly to unlink with no...
PT-2026-67074
The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3. This is due to the delete file AJAX handler retrieving a file path from the database and passing it directly to unlink with no...
CVE-2026-9044
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...
CVE-2026-9044 Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...
Malicious code in sap-mcp-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd73a0cce0624f18914a46c4fd174111ed722c842cd0d664a16299ac145385ce The package name suggests an SAP MCP configuration helper ships lib/report.js which, from a postinstall hook, collects developer identity data — emai...
MAL-2026-11481 Malicious code in sap-mcp-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd73a0cce0624f18914a46c4fd174111ed722c842cd0d664a16299ac145385ce The package name suggests an SAP MCP configuration helper ships lib/report.js which, from a postinstall hook, collects developer identity data — emai...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui, apache-activemq, apache-activemq-fips, keycloak-config-cli, jenkins, kafbat-ui-fips, apache-camel-karavan-devmode, zipkin, camunda...