256177 matches found
CVE-2026-79899 Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
EUVD-2026-90871
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-79899
Fortra BoKS Manager contains an insecure temporary file vulnerability in the bccgethostcert utility. The root cause is the creation of predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master with read access to files under BOKS_tmp may obtain CA secr...
CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
EUVD-2026-90839
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97281
The WP Project Manager plugin for WordPress (versions
CVE-2026-79901 Predictable Active Directory service-account passwords in BoKS Manager
In deployments using BoKS keytab management, affected versions of bokskeytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change tim...
CVE-2026-79901 Predictable Active Directory service-account passwords in BoKS Manager
In deployments using BoKS keytab management, affected versions of bokskeytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change tim...
CVE-2026-79901
Affected versions of boks_keytabmd in BoKS Manager deployments using BoKS keytab management contain a vulnerability where Active Directory service-account passwords are generated from a predictable pseudo-random sequence. The sequence is seeded with the current Unix timestamp , allowing an attack...
WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Project Manager versions = 4.0.7...
CVE-2026-62063
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
EUVD-2026-90806
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CVE-2026-62063
The WpTravelly (tour-booking-manager) WordPress plugin by Magepeople inc. is vulnerable to a Broken Access Control issue in versions
CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities KEV, following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 CVSS...
[SECURITY] [DLA 4808-1] network-manager-l2tp security update
Debian LTS Advisory DLA-4808-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 01, 2026 https://wiki.debian.org/LTS Package : network-manager-l2tp Version : 1.20.8-1+deb12u1 CVE ID : CVE-2026-19624 CVE-2026-75131 CVE-2026-75883 CVE-2026-93337 Andres...
CVE-2026-64950
Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...