3342 matches found
WordPress Cookie Banner for GDPR / CCPA plugin <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via 'regionArray' Parameter vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.5...
CVE-2026-19932
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
EUVD-2026-59848
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-19932
The CVE affects DefaultFuction Notice-System-Managent 2.0, specifically the GroovyShell.evaluate function in the /execute path of the NoticeController. The underlying root cause is code injection via that evaluation, enabling a remote attacker to trigger exploitation. Public exploits are indicate...
CVE-2026-19932: Improper Control of Generation of Code
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CGA-65RP-7QCX-87HQ
Bulletin has no description...
CGA-6GXC-4QX8-XHVR
Bulletin has no description...
CGA-66XC-752H-RC22
Bulletin has no description...
CGA-2F37-4Q9X-WXHX
Bulletin has no description...
CGA-4R78-JPMW-Q58W
Bulletin has no description...
CVE-2026-70623
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-71849 Hono: Proxy Helper does not remove response headers listed in the `Connection` header
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header...
CVE-2026-71231
creationtimestamp| type| source ---|---|--- 2026-08-05 11:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgfwm5ur2f...
Photon OS 5.0: Mysql PHSA-2023-5.0-91-0147
An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0147. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libtiff PHSA-2026-5.0-91-0757
An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0757. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Apple battles it out again with the UK over encrypted iCloud access
The UK Home Office has once again demanded Apple allows it access to encrypted iCloud data. The Guardian reports that the Home Office issued a Technical Capability Notice to Apple, this time targeting only British users. A Technical Capability Notice is a formal government order that compels tech...
MINI-H99H-3RFP-H4MX
Bulletin has no description...
CVE-2026-69096
creationtimestamp| type| source ---|---|--- 2026-08-04 04:05:00+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msa533lecw2m...
RockyLinux 9 : firefox (RLSA-2026:47104)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47104 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in th...