CVE-2026-36453

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...

SUSE CVE-2026-89447

In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...

CVE-2026-89447

A flaw was found in the Linux kernel's iommufd subsystem. A local attacker could exploit a vulnerability where an object reference is leaked during the unmapping of internal accesses. This occurs because the iommufdaccessnotifyunmap function incorrectly locks an object before checking if the acce...

CVE-2026-54258

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

DEBIAN-CVE-2026-89447

In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...

UBUNTU-CVE-2026-89447

In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...

CVE-2026-89447

In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...

CVE-2026-89447 iommufd: Avoid locking internal accesses during unmap

In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...

CVE-2026-89447 iommufd: Avoid locking internal accesses during unmap

In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...

CVE-2026-89447

CVE-2026-89447 affects the Linux kernel iommufd subsystem. In iommufd_access_notify_unmap() , the code calls iommufd_lock_obj() before checking whether the access is internal. When the access is internal, the loop skips it via continue, bypassing the matching iommufd_put_object() call used by the...

CVE-2026-62113

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62134

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62134

An Insecure Direct Object References (IDOR) vulnerability was identified in the WordPress Starter Templates plugin (versions ≤ 4.7.5 ). The flaw allows a contributor-level authenticated user to manipulate objects they should not have access to, resulting in a low integrity impact (CVSS 4.3, MEDIU...

CVE-2026-62134 WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62134 WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

EUVD-2026-76207

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62140

CVE-2026-62140 affects the WordPress plugin Quiz And Survey Master in versions

CVE-2026-62140 WordPress Quiz And Survey Master plugin <= 11.2.5 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...