22700 matches found
CVE-2026-0683
CVE-2026-0683 (SupportCandy – WordPress) : Wordfence reports a SQL Injection in the SupportCandy plugin through the Number field filter, affecting all versions up to 3.4.4. Exploitation requires Subscriber+ (authenticated) access and can lead to extraction of sensitive data. The issue stems from ...
CVE-2026-0683 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all versions up to, and including, 3.4.4. This is due to insufficient escaping on the user-supplied operand value when using the equals...
CVE-2026-0683 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all versions up to, and including, 3.4.4. This is due to insufficient escaping on the user-supplied operand value when using the equals...
EUVD-2026-5081
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all versions up to, and including, 3.4.4. This is due to insufficient escaping on the user-supplied operand value when using the equals...
PT-2026-5503
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all versions up to, and including, 3.4.4. This is due to insufficient escaping on the user-supplied operand value when using the equals...
CVE-2025-69517
creationtimestamp| type| source ---|---|--- 2026-01-30 06:22:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmnytrb6w2a...
CVE-2026-25068 alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow
alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...
RHSA-2026:1494 Red Hat Security Advisory: kernel security update
Bulletin has no description...
ECHO-29B2-9C4E-7DF9
Bulletin has no description...
ECHO-4897-A3E3-018C
Bulletin has no description...
CGA-VMWR-24F3-3728
Bulletin has no description...
CGA-4558-P3JF-W979
Bulletin has no description...
CGA-2Q8X-54R9-WGMP
Bulletin has no description...
Libgcrypt 1.12.0
Libgcrypt is a general-purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers AES, DES, Blowfish, CAST5, Twofish, and Arcfour, hash algorithms MD4, MD5, RIPE-MD160, SHA-1, and TIGER-192, MACs HMAC for all hash...
CVE-2026-24856 iccDEV has UB runtime error in <icTagTypeSignature>
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile X...
OPENSUSE-SU-2026:20122-1 Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers bsc1248737...
CVE-2026-23014
creationtimestamp| type| source ---|---|--- 2026-01-28 15:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdilogrebe2h...
CVE-2026-1056
creationtimestamp| type| source ---|---|--- 2026-01-28 13:55:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdiggqeliv27 2026-01-28 14:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdigsfe4h32t 2026-01-29 21:15:25+00:00| seen|...