CVE-2026-2694

Affected software: The Events Calendar WordPress plugin. Vulnerability: Improper authorization due to inadequate capability checks on can_edit and can_delete, affecting all versions up to and including 6.15.16. Impact: Authenticated users with Contributor-level access and above can update or tras...

CVE-2026-2694 The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API

The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'canedit' and 'candelete' function in all versions up to, and including, 6.15.16. This makes it possible for authenticated attackers, with...

CVE-2026-2694 The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API

The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'canedit' and 'candelete' function in all versions up to, and including, 6.15.16. This makes it possible for authenticated attackers, with...

CVE-2026-1662

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint...

UBUNTU-CVE-2026-1662

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint...

CVE-2026-1662

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint...

CVE-2026-1662

Removed by vendor...

CVE-2026-1662

Summary: CVE-2026-1662 affects GitLab CE/EE prior to fixed versions. The issue could allow an unauthenticated user to cause a Denial of Service by sending specially crafted requests to the Jira events endpoint. Affected versions (per description): GitLab 14.4 before 18.7.5, 18.8 before 18.8.5, an...

CVE-2026-1662 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint...

CVE-2026-1662 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint...

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

Summary An unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk...

kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling

A flaw was found in the Linux kernel's Bluetooth subsystem. A use-after-free UAF vulnerability exists in the hcidisconnectallsync function. This can occur if a Bluetooth connection is deleted while a controller event is being processed concurrently. A local attacker could potentially exploit this...

CVE-2025-67601

creationtimestamp| type| source ---|---|--- 2026-02-25 12:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfomzmxmks2s 2026-02-25 12:53:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfopybvna42n 2026-03-03 17:00:16+00:00| seen|...

CVE-2026-3167

creationtimestamp| type| source ---|---|--- 2026-02-25 08:41:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfobvjvvuj2u 2026-02-25 09:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfodmcvj4f2x 2026-02-25 19:40:09+00:00| seen|...

WordPress plugin The Events Calendar 授权问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

PT-2026-22024

Name of the Vulnerable Software and Affected Versions The Events Calendar plugin for WordPress versions prior to 6.15.16 Description The Events Calendar plugin for WordPress is susceptible to unauthorized modification and potential loss of data. This is due to an insufficient capability check...

PT-2026-21995

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 14.4 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4 GitLab CE/EE versions 18.9 through 18.9.0 Description An unauthenticated user could potentially cause a denial-of-service condition by sending specially crafte...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site Scripting issue in Mermaid sandbox impacts GitLab CE/EE Denial of Service issue in container registry impacts GitLab CE/EE Denial of Service issue in Jira events endpoint impacts GitLab CE/EE Regular Expression Denial of Service issue in GitLab merge requests impacts...

CVE-2026-27468

creationtimestamp| type| source ---|---|--- 2026-02-24 21:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4jo7vli2e 2026-02-24 21:42:57+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3mfn54nc75g2n 2026-02-25 09:14:33+00:00| seen|...

CVE-2026-27208

creationtimestamp| type| source ---|---|--- 2026-02-24 15:57:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmjtnmafv2s 2026-02-24 17:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfmnszvn4m2u 2026-02-26 21:00:15+00:00| seen|...