1943 matches found
EUVD-2026-2980
The Fancy Product Designer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 6.4.8. This is due to improper error handling in the PDF upload functionality that exposes server filesystem paths and stack traces in error messages. This makes it possible...
EUVD-2026-2968
The Booking Calendar plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Exposure in all versions up to, and including, 10.14.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view all booking records in the...
EUVD-2026-3013
EUVD-2026-3013...
EUVD-2026-3029
EUVD-2026-3029...
EUVD-2026-3018
EUVD-2026-3018...
EUVD-2026-3012
EUVD-2026-3012...
EUVD-2026-2999
EUVD-2026-2999...
CVE-2026-22639
creationtimestamp| type| source ---|---|--- 2026-01-15 15:12:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...
CVE-2026-22915
creationtimestamp| type| source ---|---|--- 2026-01-15 14:08:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchr32cy2k2r 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...
CVE-2026-22907
creationtimestamp| type| source ---|---|--- 2026-01-15 13:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchp3c6pzn2o 2026-01-15 13:48:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchpx2etni2z 2026-01-15 15:12:35+00:00| seen|...
EUVD-2026-2835
Not used...
CVE-2026-22703 vulnerabilities
Vulnerabilities for packages: witness, zot, falcoctl, kyverno-notation-aws, aactl, goreleaser, teleport, tkn, flux-source-controller, policy-controller, gitsign, ratify...
CVE-2026-0421
creationtimestamp| type| source ---|---|--- 2026-01-15 00:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcgdctd2lp2e...
CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSBINTERFACEDESCRIPTOR values and uses them as indices in libusbudevcompletemsconfigsetup, causing an out‑of‑bounds read. This vulnerability is...
CVE-2026-22264
creationtimestamp| type| source ---|---|--- 2026-01-14 17:13:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894572299072531...
EUVD-2026-2477
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma array with values of 0 when the eb structure is first set up. In particular, this sets the eb-vmai.vma pointers to NULL, simplifying...
EUVD-2026-2481
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventions. Sign extend its arguments properly to avoid kernel panic. This is done by adding a new...
EUVD-2026-2591
EUVD-2026-2591...