18101 matches found
CVE-2026-16078
CVE-2026-16078 affects the WCPOS
EUVD-2026-47928
The WCPOS – Point of Sale POS plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 via the 'type' parameter parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to read the...
CVE-2026-59677
The CVE-2026-59677 issue is a local vulnerability in SELinux policycoreutils seunshares (up to version 3.10) that permits a user running in an unconfined context to kill root-owned processes also in unconfined context. Documented under PT-2026-61060 as a Local DoS/vector in seunshare, with the af...
PT-2026-63994
DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...
MINI-4WWJ-44P3-RHHM
Bulletin has no description...
CVE-2026-64832
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ffnvdecstartframesepref error path frees...
MINI-64CH-CMFM-W7G9
Bulletin has no description...
MINI-27XP-JFFX-R6W6
Bulletin has no description...
MINI-P9Q9-V925-P526
Bulletin has no description...
MINI-QHR3-7FWM-8JFW
Bulletin has no description...
MINI-R9PP-F9HW-XC56
Bulletin has no description...
MINI-7P7W-7QC7-8XRV
Bulletin has no description...
MINI-3HFJ-7CMP-PJCX
Bulletin has no description...
MINI-22R6-MJ52-7H6R
Bulletin has no description...
MINI-H5MC-9HMR-33W6
Bulletin has no description...
CVE-2026-44192
A flaw was found in the Ansible Lightspeed Model Context Protocol MCP server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the...
CVE-2026-44192 Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal
A flaw was found in the Ansible Lightspeed Model Context Protocol MCP server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the...
EUVD-2026-47652
A flaw was found in the Ansible Lightspeed Model Context Protocol MCP server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the...
EUVD-2026-47638
n8n before 2.29.8 and 2.30.x before 2.30.1 affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was introduced does not verify that the authenticated user has access to the workflow referenced as the OAuth resource. On instances with at least one active MCP Server Trigger...