Lucene search
+L

60818 matches found

OSV
OSV
•added 2026/09/09 2:10 p.m.•5 views

USN-8675-2 perl vulnerabilities

USN-8675-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 26.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an...

9.8CVSS5.9AI score0.00559EPSS
SaveExploits0References5
Ubuntu
Ubuntu
•added 2026/09/09 2:10 p.m.•9 views

USN-8675-2: Perl vulnerabilities

USN-8675-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 26.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an...

9.8CVSS5.9AI score0.00559EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/09 1:31 p.m.•39 views

CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

5.3CVSS0.00297EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 1:31 p.m.•12 views

EUVD-2026-74907

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

6.9CVSS6AI score0.00297EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/09 1:31 p.m.•63 views

CVE-2026-73324

VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds read in the RTSP module. The root cause is that RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length without guaranteeing null termination, and rtsp_get in modules/access/rtsp/rtsp.c passes...

5.3CVSS5.6AI score0.00297EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/09 1:31 p.m.•15 views

CVE-2026-73324

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

5.3CVSS5.6AI score0.00297EPSS
SaveExploits0
OSV
OSV
•added 2026/09/09 12:05 p.m.•6 views

RLSA-2026:64815 Moderate: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 For more details about the...

4.8CVSS5.8AI score0.005EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/09 9:17 a.m.•23 views

CVE-2026-80099

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

8.8CVSS0.0291EPSS
SaveExploits1References11
NVD
NVD
•added 2026/09/09 9:17 a.m.•8 views

CVE-2026-16272

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS0.00144EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 8:28 a.m.•18 views

EUVD-2026-74773

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

8.8CVSS5.8AI score0.0291EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2026/09/09 8:28 a.m.•43 views

CVE-2026-80099 Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

8.8CVSS0.0291EPSS
SaveExploits1References11
OSV
OSV
•added 2026/09/09 8:28 a.m.•50 views

CVE-2026-80099 Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

8.8CVSS5.8AI score
SaveExploits0References13
CVE
CVE
•added 2026/09/09 8:28 a.m.•75 views

CVE-2026-80099

CVE-2026-80099 affects several Newfold WordPress plugins (Crazy Domains, Web, Hostgator, Bluehost) that bundle the wp-module-data module. The root cause is an HMAC-style Bearer token validation flaw : when HiiveConnection::get_auth_token() returns false, PHP coerces strrev(false) to an empty stri...

8.8CVSS5.8AI score0.0291EPSS
SaveIn wildExploits1References11
Vulnrichment
Vulnrichment
•added 2026/09/09 8:28 a.m.•11 views

CVE-2026-80099 Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

8.8CVSS5.8AI score0.0291EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2026/09/09 8:17 a.m.•37 views

CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS0.00144EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 8:17 a.m.•10 views

EUVD-2026-74769

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 8:17 a.m.•9 views

CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 8:17 a.m.•29 views

CVE-2026-16272

PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) is affected by a client IP spoofing vulnerability caused by use of less trusted source —specifically, untrusted HTTP headers are relied upon for identifying the client IP, allowing exploitation of trusted iden...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/09/09 7:08 a.m.•8 views

WordPress WP Module Data plugin <= 2.9.7 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Module Data versions = 2.9.7...

8.8CVSS5.8AI score0.0291EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2026/09/09 4:20 a.m.•7 views

CVE-2026-81647

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

5.3CVSS0.00361EPSS
SaveExploits0References3
Rows per page
Query Builder