59076 matches found
EUVD-2026-33251
The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...
CVE-2026-7480
creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmxka2lxrs2e 2026-05-29 03:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116655628380153994 2026-05-29 05:09:25+00:00| seen|...
CVE-2006-3918
creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:06+00:00| seen| Telegram/6s3VRd-d5V93Kqqbw2bpShp3KD9FSCashxK24K-SibeAsU...
SUSE CVE-2026-46111
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix potential UAF in createbigsync Add hciconnvalid check in createbigsync to detect stale connections before proceeding with BIG creation. Handle the resulting -ECANCELED in createbigcomplete and re-validate...
SUSE CVE-2026-46117
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARNON then go on to corrupt the kernel. Just...
CVE-2026-10057
creationtimestamp| type| source ---|---|--- 2026-05-29 01:15:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html...
CVE-2026-10058
creationtimestamp| type| source ---|---|--- 2026-05-29 01:15:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html...
EUVD-2026-33165
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the aftervalidatesavepost function unconditionally trusting the attacker-controlled acfpostid POST...
CVE-2026-44848
creationtimestamp| type| source ---|---|--- 2026-05-29 00:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxbqmil4d2e 2026-08-20 03:00:05+00:00| seen| Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE 2026-08-21 00:00:11+00:00| published-proof-of-concept|...
CVE-2026-44881
creationtimestamp| type| source ---|---|--- 2026-05-29 00:23:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxbhnzpaf2w 2026-06-11 19:22:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnzx6hyanz2x 2026-06-11 19:27:32+00:00| seen|...
PT-2026-44932
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.3 Description Dokploy constructs shell commands using JavaScript template literals and executes them via the child process.exec function, which runs through /bin/sh -c. User-supplied data, specifically branch...
CVE-2026-46827
creationtimestamp| type| source ---|---|--- 2026-05-28 23:41:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx74m6puz2p 2026-06-04 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngddmeksl25...
CVE-2026-46828
creationtimestamp| type| source ---|---|--- 2026-05-28 23:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6omthyz2j 2026-06-04 01:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnggovmo362s...
CVE-2026-46826
creationtimestamp| type| source ---|---|--- 2026-05-28 23:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6isfqoe2x 2026-06-03 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngbnvoka32o...
CVE-2026-35277
creationtimestamp| type| source ---|---|--- 2026-05-28 22:34:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmx3ennnnk23 2026-06-04 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngieinue22s...
CVE-2026-8809 Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the aftervalidatesavepost function unconditionally trusting the attacker-controlled acfpostid POST...
DEBIAN-CVE-2026-49299
In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...
CVE-2026-9645
creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzi3bahs2w 2026-05-28 23:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6g46htp2v 2026-08-12 08:00:07+00:00| seen|...
CVE-2026-33590
creationtimestamp| type| source ---|---|--- 2026-05-28 21:40:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwydw5s2c2n 2026-06-12 12:43:17+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3rd3yvp72n 2026-06-16 00:48:01+00:00| seen|...