3342 matches found
DEBIAN-CVE-2026-53043
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qrnumregions in dlmmatchregions Patch series "ocfs2/dlm: fix two bugs in dlmmatchregions". In dlmmatchregions, the qrnumregions field from a DLMQUERYREGION network message is used to drive loops over the...
CGA-353W-J5X7-624V
Bulletin has no description...
MINI-Q58C-458R-FF7M
Bulletin has no description...
MINI-98FR-QQ55-HQ33
Bulletin has no description...
CVE-2026-9476
creationtimestamp| type| source ---|---|--- 2026-06-22 04:31:41+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou2jbbqfi2f...
CVE-2026-12813
Affected software: activepieces (
CGA-6VW4-548H-6H3C
Bulletin has no description...
CVE-2026-44046 Apache APISIX: wolf-rbac plugin Identity Spoofing
Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf-rbac plugin under default configuration to potentially pollute logs with spoofed identity information and exploit IP based access control rules. This issue affects Apache APISIX: from 1.2.0 through...
CVE-2026-47267
creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:31+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-c4v7-xg93-qf8g...
PT-2026-51097
Name of the Vulnerable Software and Affected Versions py7zr versions prior to 0.22.1 Description The Worker.decompress function in py7zr/worker.py extracts archive entries without tracking the total decompressed size. This allows a specially crafted .7z file to cause disk or memory exhaustion...
CVE-2026-11358
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-11358: Improper Neutralization of Input During Web Page Generation
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it...
CGA-8MM8-4FGF-2MH2
Bulletin has no description...
PYSEC-2026-218
A path traversal in the SFTP provider SFTPHook.retrievedirectory / SFTPOperatoroperation=get let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is a...
CVE-2024-37496 WordPress Metro Magazine theme <= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability
Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from n/a through 1.3.7...
CVE-2024-37496 WordPress Metro Magazine theme <= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability
Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from n/a through 1.3.7...
CVE-2024-37496
CVE-2024-37496 concerns the WordPress Metro Magazine theme (
PT-2026-50220
Name of the Vulnerable Software and Affected Versions apache-airflow-providers-sftp versions prior to 5.8.1 Description A path traversal issue exists in the SFTP provider. A malicious or compromised remote SFTP server can write files outside the configured local destination directory by using...