45108 matches found
analogic-framework (4.1.102), app-reviews (>=0.1.0, <=0.4.0) +55 more potentially affected by CVE-2026-69249 via cryptography (46.0.6)
cryptography PYPI version 46.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - analogic-framework 4.1.102 - app-reviews =0.1.0, =0.13.35, =26.8.1, =26.8.1, =1.0.962, =1.1.0.dev20260326020353, =2.1.8rc4, =5.9.5,...
firefox: thunderbird: Information disclosure in the Framework component in DevTools
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...
firefox: thunderbird: Information disclosure in the Framework component in DevTools
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...
CVE-2026-14816
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
CVE-2026-14816
The GDPR Framework By Data443 WordPress plugin (versions before 2.4.0 ) is vulnerable to an improper access control flaw. The plugin fails to adequately verify the authorization or the identity of the data subject when recording privacy requests or cookie-consent choices. This allows unauthentica...
CVE-2026-14816
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
CVE-2026-14816 The GDPR Framework < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
monkey365 v098.8
Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...
EUVD-2026-52509
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-74720
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 7.30.7-p1+tuxcare...
Important: python3-tornado
Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...
PT-2026-75233
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 12.58.0-p2+tuxcare...
PT-2026-74709
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 10.50.2-p1+tuxcare...
PT-2026-74707
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 12.58.0-p1+tuxcare...
PT-2026-75463
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 8.12.3-p2+tuxcare...
AI Forensics across White-, Grey-, and Black-Box Access: A Process Model and Research Agenda for Post-Incident Investigation of AI Systems
AI systems are increasingly involved in decisions and actions that may later require investigation. When an AI related incident occurs, investigators need to reconstruct what the system did, why it behaved that way, and which part of the system or supply chain contributed to the outcome. Existing...
CVE-2026-14816: Improper Access Control
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
PT-2026-74458
TuxCare rebuilt laravel/framework to address 5 CVEs. Fixed in 8.12.0-p3+tuxcare...