72224 matches found
GHSA-F4CV-XM48-3694 vulnerabilities
Vulnerabilities for packages: eco-python-curl...
CVE-2026-56000 vulnerabilities
Vulnerabilities for packages: xorg-server...
MINI-HGJV-F7V2-J43X
Bulletin has no description...
CVE-2026-17166
The CVE concerns The Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar (WordPress) with an authorization bypass in all versions up to and including 5.3.7. The root cause is that the plugin does not properly verify that a user is authorized to perform ...
ECHO-4DF1-D3CB-67CA
Bulletin has no description...
ECHO-AE6A-CB56-09E6
Bulletin has no description...
ECHO-BB87-47C0-0473
Bulletin has no description...
CVE-2025-69949
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...
Linux Distros Unpatched Vulnerability : CVE-2026-55555
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...
TencentOS Server 4: python-urwid (TSSA-2026:0729)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0729 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
PT-2026-65741
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the client policy enforcement mechanism where the system verifies group membership using names rather than unique identifiers. An attacker possessing client management...
PT-2026-65709
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint...
PT-2026-65707
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson position, and cached lesson state via the SCORM API endpoint...
CVE-2026-54658
creationtimestamp| type| source ---|---|--- 2026-07-28 23:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqmavaytp2e 2026-07-29 02:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdtaeoa2u 2026-07-29 02:50:47+00:00| seen|...
CVE-2026-14959
creationtimestamp| type| source ---|---|--- 2026-07-28 23:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqk2jwuqs2i 2026-07-28 23:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlsmo2et2i...
CVE-2026-14996
creationtimestamp| type| source ---|---|--- 2026-07-28 22:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqfvwf55v2d 2026-07-28 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjm5hnqn22...
CGA-9784-9Q3P-Q2H5
Bulletin has no description...
CGA-V6PX-QWQW-MGCG
Bulletin has no description...