CVE-2026-47602

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

CVE-2026-47600

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service,...

Linux Distros Unpatched Vulnerability : CVE-2026-47360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's modsessioncookie module. When SessionCookieRemove changes acros...

The vulnerability of the is_pem_format() function in the jwt/utils.py library of PyJWT allows a attacker to bypass existing security mechanisms and disclose sensitive information.

The vulnerability of the ispemformat function in the jwt/utils.py library of PyJWT is related to errors in the verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms and disclose sensitive information...

CVE-2026-47527

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

PT-2026-104438

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The backup and restore routine records the full database connection command in plain text within a log file on the host. This includes the superuser password, which can be used to gain...

PT-2026-104088

Name of the Vulnerable Software and Affected Versions Request a Quote WordPress plugin versions prior to 2.5.7 Description An unauthenticated AJAX handler fails to perform an authorization check, which allows unauthenticated users to read contact records of quote-request submissions. This include...

PT-2026-104248

YesWiki before 4.6.7 contains a missing authorization vulnerability in the listpagestag and includepages actions of the tags tool, which enumerate pages without applying read-ACL filtering. Unauthenticated or unprivileged attackers can embed these actions with a chosen tag or page name to disclos...

PT-2026-104110

Name of the Vulnerable Software and Affected Versions Popup Maker WP WordPress plugin versions prior to 1.4.6 Description The plugin fails to perform authorization checks on several actions and exposes its management page to any logged-in user. This allows users with low-privileged roles, such as...

ROS-20261002-73-0101

The vulnerability of the picksplit function in the PostgreSQL database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...

ROS-20261002-73-0109

The vulnerability of the SCRAM authentication subsystem in the PostgreSQL database management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0110

The vulnerability of the SCRAM authentication subsystem in the PostgreSQL database management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0099

The vulnerability of the picksplit function in the PostgreSQL database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...

CVE-2026-47514

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents including return addresses and pointers. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2026-47512

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read leading to kernel information disclosure. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of...

CVE-2026-104455: Exposure of Sensitive Information to an Unauthorized Actor

YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...

PT-2026-104152

Name of the Vulnerable Software and Affected Versions JSON API Auth plugin for WordPress versions prior to 3.1.3 Description An authentication bypass exists due to cached session cookie disclosure. The PI-Media/json-api parent plugin caches controller dispatch results in transients based only on...

PT-2026-104439

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The message broker logs client connection credentials and the associated password in plain text during normal operation. This allows any party with read access to the log files, backups,...

PT-2026-104436

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description Armatura One stores database and message-broker credentials in an installation configuration file. When protection is enabled, these credentials are encrypted using AES-128-CBC Advanced...

ROS-20261002-73-0111

The vulnerability of the SCRAM authentication subsystem in the PostgreSQL database management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information...