13100 matches found
CVE-2017-6452
creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...
CVE-2017-6462
creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...
CVE-2026-6431 User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...
EUVD-2026-72367
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...
CVE-2026-6431
CVE-2026-6431 affects the User Profile Builder WordPress plugin (all versions up to and including 3.15.7 ), which is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) through the 'Biographical Info' meta field parameter. The root cause is insufficient input sanitization and output e...
CVE-2006-2451
creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-09 05:00:06+00:00| seen|...
CVE-2026-78221
A flaw was found in OpenVPN. An incorrect buffer size calculation within the Windows Interactive Service allows local authenticated users to trigger memory corruption or disclose sensitive information. This vulnerability can be exploited by providing specially crafted inputs...
CVE-2026-14296
creationtimestamp| type| source ---|---|--- 2026-09-07 09:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muw5i5f3lk2m 2026-09-08 01:10:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117232749866661455 2026-09-08 01:10:02+00:00| seen|...
SUSE-SU-2026:4009-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...
CVE-2026-78221
An incorrect buffer size calculation in the Windows Interactive Service component of OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information by supplying crafted NRPT inputs . The CVSS 4.0 base score is 5.9 (MEDIUM) with a loc...
EUVD-2026-72208
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132...
CVE-2026-86235
creationtimestamp| type| source ---|---|--- 2026-09-07 01:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hbem2pqty2e3x...
PT-2026-86610
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132...
CVE-2026-6431: Improper Neutralization of Input During Web Page Generation
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...
PT-2026-88204
These are all security issues fixed in the python313-idna-3.19-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-86756
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...
PT-2026-88185
These are all security issues fixed in the GraphicsMagick-1.3.48-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-86764
A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...
The vulnerability of the container and artifact image verification platform lies in its authentication procedures’ flaws, which allow attackers to disclose protected information.
The vulnerability of the container and artifact image verification platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...