2363 matches found
Astra Linux – Vulnerability in libtasn1-6
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data, resulting in a buffer overflow in asn1expendoctetstring...
EUVD-2026-55021
The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...
CVE-2026-65559
The CVE relates to a privilege-escalation issue in the WordPress plugin Order Delivery Date for WooCommerce, affecting versions up to 4.6.0. The vulnerability targets the shop manager role within the plugin’s delivery date functionality. The provided data constrain the impact to a privilege escal...
ROOT-OS-UBUNTU-2404-CVE-2025-21820 CVE-2025-21820 in linux - Patched by Root
Root has patched CVE-2025-21820 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-68188 CVE-2025-68188 in linux - Patched by Root
Root has patched CVE-2025-68188 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-53140 CVE-2026-53140 in linux - Patched by Root
Root has patched CVE-2026-53140 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2026-16993 DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web server that does not honor .htaccess such as nginx an unauthenticated visitor...
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions 6.54.1...
CLSA-2026-1784769619 TuxCare security update for ws (5 CVEs)
TuxCare rebuilt ws to address 5 CVEs. Fixed in 4.1.0-tuxcare.2...
CLSA-2026-1784596264 TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 47 io.netty packages to address 8 CVEs. Fixed in 4.1.117.Final-tuxcare.2...
CLSA-2026-1784164029 TuxCare security update for io.netty (1 CVE)
TuxCare rebuilt 46 io.netty packages to address 1 CVE. Fixed in 4.1.75.Final-tuxcare.2...
CLSA-2026-1776213248 TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 46 io.netty packages to address 6 CVEs. Fixed in 4.1.82.Final-tuxcare.1...
CLSA-2026-1776213240 TuxCare security update for io.netty (9 CVEs)
TuxCare rebuilt 40 io.netty packages to address 9 CVEs. Fixed in 4.1.49.Final-tuxcare.1...
CLSA-2026-1773965925 TuxCare security update for jsonpointer (5 CVEs)
TuxCare rebuilt jsonpointer to address 5 CVEs. Fixed in 4.1.0-tuxcare.2...
Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 5.9% at k=15 and Mythos 5 2.6%, making it the most robust model...
CVE-2026-46593 Authenticated SQL Injection in PHP Poll Script
A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...
PT-2026-66751
A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...
CVE-2026-11383
Summary of CVE-2026-11383 : IBM WebSphere Application Server (WAS) is affected by cross-site scripting (XSS) in the Administrative Console when shipped with Tivoli System Automation Application Manager 4.1 and related bundles. Connected documents confirm affected WAS versions include 8.5 and 9.0 ...