38267 matches found
EUVD-2026-74597
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49310
CVE-2026-49310 is a permission control vulnerability in the event notification module affecting Huawei consumer devices , including phones, Vision, wearables, and laptops (per the September 2026 security bulletins). Successful exploitation may affect service confidentiality . The CVSS 3.1 score i...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49311
CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-74595
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-89187
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...
CVE-2026-49311: Undefined Security Weakness
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-88817
The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...
CVE-2026-49310: Undefined Security Weakness
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2026-88794
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-11821: Missing Authorization
The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...
PT-2026-88793
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-86994 n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast ...
[SECURITY] [DSA 6490-1] fort-validator security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6490-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 08, 2026 https://www.debian.org/security/faq -...
CVE-2026-69648
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
EUVD-2026-73029
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2026-69648
CVE-2026-69648 is a use after free vulnerability in Windows Notification that allows a low-privilege local attacker to escalate privileges. The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and no user interaction required, but full impact to confidentiality, integrity...
WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management vulnerability
Missing Authorization to Authenticated Subscriber+ Notification Flow Management vulnerability discovered by Sushi Com Abacate in WordPress Plugin WP Event Solution versions = 4.1.17...
