264841 matches found
ROS-20261006-73-0132
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-106393
Name of the Vulnerable Software and Affected Versions WP2LEADS versions prior to 3.5.8 Description Broken access control allows users with the Subscriber role to perform unauthorized actions. Recommendations Update to a version newer than 3.5.7...
PT-2026-106423
Name of the Vulnerable Software and Affected Versions App for Cloudflare® versions prior to 1.10.2 Description Broken access control exists for subscribers within the application, which may allow unauthorized access to restricted resources or functionality. Recommendations Update to a version new...
CVE-2026-106586: Always-Incorrect Control Flow Implementation
In sshd in OpenSSH before 10.6, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283...
ROS-20261006-73-0126
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0117
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0123
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0223
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0286
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-106328
Unauthenticated Broken Access Control in Morning for WooCommerce = 2.4.1 versions...
PT-2026-106322
Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...
PT-2026-106327
Name of the Vulnerable Software and Affected Versions WDS MCP Content Manager versions prior to 3.10.5 Description A broken access control issue exists for contributors, allowing unauthorized access or actions within the system. Recommendations Update to a version newer than 3.10.4...
PT-2026-106334
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
PT-2026-106326
Name of the Vulnerable Software and Affected Versions iatoai IATO MCP versions prior to 1.12.0 Description A missing authorization issue allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version 1.12.0 or later...
ROS-20261006-73-0067
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20261006-73-0452
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0464
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-106503: Improper Handling of Case Sensitivity
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...