72216 matches found
GHSA-386Q-5HP3-95M9
creationtimestamp| type| source ---|---|--- 2026-07-29 11:31:22+00:00| seen| https://gist.github.com/alon710/18c642199d3d87ef43a0391f4cc215a6...
CVE-2026-5060
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14. This is due to the stmlmsdeletecover function lacking ownership validation on the fileid parameter before...
CVE-2026-64357
In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...
CVE-2026-59309
creationtimestamp| type| source ---|---|--- 2026-07-29 10:28:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrpp2orks23 2026-07-29 12:48:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrxjfggfg2z 2026-07-29 13:00:55+00:00| seen|...
EUVD-2026-50271
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14. This is due to the stmlmsdeletecover function lacking ownership validation on the fileid parameter before...
CVE-2026-5060
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14. This is due to the stmlmsdeletecover function lacking ownership validation on the fileid parameter before...
CVE-2026-51272
creationtimestamp| type| source ---|---|--- 2026-07-29 09:26:50+00:00| seen| https://gist.github.com/programmervuln/5d1388bb85dfaf2e7e2700c5a2bceef5 2026-07-30 20:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvdaisvzt23 2026-07-31 09:23:13+00:00| seen|...
EUVD-2026-50214
A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...
CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....
CVE-2026-5626
creationtimestamp| type| source ---|---|--- 2026-07-29 08:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5626...
MINI-MF52-V926-3VPJ
Bulletin has no description...
CVE-2026-63232
creationtimestamp| type| source ---|---|--- 2026-07-29 06:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdmem3gi2k...
CVE-2026-64544
In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - fix OOB read in pefiledigestpecontents pefiledigestpecontents computes the trailing-data hash length as pelen - hashedbytes + certssize. A crafted PE can make the addition exceed pelen, causing the unsign...
CVE-2026-63238
CVE-2026-63238 describes an authentication bypass in Koollab LMS where an unauthenticated attacker can take over any account (including administrator) by supplying a valid user UUID to the 2FA validation endpoint. The connected records reiterate this access path but do not provide version, patch,...
CVE-2026-63238
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint...
BELL-CVE-2026-64509
Bulletin has no description...
BELL-CVE-2026-64491
Bulletin has no description...
BELL-CVE-2026-64302 CVE-2026-64302 does not affect BellSoft software
Bulletin has no description...