12859 matches found
CVE-2026-101148
The BackupSheep WordPress Backup Plugin (versions through 1.8 ) is vulnerable to unauthenticated access due to improper validation of its integration key . The plugin treats unset or blank keys as valid, enabling attackers to create and download full site backups —including databases with user pa...
MobSF_AI
MobSF AI 사이드카 이 프로젝트는 Mobile Security Framework MobSF에 AI 기반 채팅 어시스턴트를 추가합니다. 보안 분석가가 MobSF에서 생성된 분석 보고서에 대해 인터페이스 내에서 직접 질문할 수 있도록 하며, OpenAI의 모델을 활용합니다. 기능 원활한 통합 : Nginx 리버스 프록시를 사용하여 MobSF 보고서에 특화된 채팅 인터페이스를 직접 주입합니다. 컨텍스트 인식 : AI 어시스턴트가 현재 분석 보고서정적 분석를 자동으로 검색하여 질문에 답변하는 컨텍스트로 사용합니다. 대화형 Q &...
AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1772466351)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772466351 advisory. - Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans...
AlmaLinux 9.2 [TuxCare] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (ALMALINUX9.2:CLSA-2025:1744927038)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744927038 advisory. - Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute...
CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS6:CLSA-2026:1773506143)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1773506143 advisory. - Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration...
CVE-2026-102676
A flaw was found in Electron. This vulnerability allows untrusted guest content loaded inside an embedded web view to run background worker tasks with elevated privileges. By enabling Node.js integration within background web workers, an attacker can bypass security restrictions set by the host...
CVE-2026-100279
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100260
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
EUVD-2026-90023
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100279
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100270
In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations...
CVE-2026-100270
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists where users with low-level Admin Read permissions can disclose integration credentials . This disclosure occurs specifically through the use of import configurations . The impact is a low-level confidentiality breach in...
EUVD-2026-90014
In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations...
CVE-2026-100260
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
EUVD-2026-90004
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
CVE-2026-100260
In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists in the mailbox integration that allowed authentication to persist or occur after a password reset . The vulnerability carries a CVSS 3.1 score of 5.3 (Medium) , indicating a network-based attack vector with low complexi...
CVE-2026-96816
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
EUVD-2026-89869
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
CVE-2026-96816 WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...