47011 matches found
CVE-2026-4792 Bread <= 2.9.12 - Missing Authorization to Unauthenticated Information Exposure
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due to the lack of authentication and authorization checks on the settings export functionality downloadsettings function which is registered on the pluginsloaded hook and explicit...
CVE-2026-4792
The Bread plugin for WordPress (versions up to and including 2.9.12 ) is vulnerable to information exposure due to missing authentication and authorization checks on the download_settings function, which is registered on the plugins_loaded hook and explicitly allows execution on non-admin (public...
CVE-2026-4792 Bread <= 2.9.12 - Missing Authorization to Unauthenticated Information Exposure
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due to the lack of authentication and authorization checks on the settings export functionality downloadsettings function which is registered on the pluginsloaded hook and explicit...
How to Comply with MiCA Regulations for Crypto Asset Service Providers in the European Market?
MiCA compliance requires crypto firms entering the EU to address authorization, governance, capital, client asset protection and ongoing reporting requirements...
PT-2026-95788
Name of the Vulnerable Software and Affected Versions Bread plugin for WordPress versions prior to 2.9.13 Description Information exposure occurs due to missing authentication and authorization checks in the settings export functionality. The download settings function, registered on the plugins...
The vulnerability of the NPM packet manager’s vm2 library, related to a flaw in the data protection mechanism, allows attackers to execute arbitrary code.
The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the NPM packet manager’s vm2 library, related to a flaw in the data protection mechanism, allows attackers to execute arbitrary code.
The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
CVE-2026-84241
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...
CVE-2026-84085
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...
CVE-2026-84105
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command...
CVE-2026-84108
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84084
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery CSRF vulnerability...
CVE-2026-84086
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...
CVE-2026-84089
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-84106
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84239
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command...
CVE-2026-84075
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
CVE-2026-84078
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...
CVE-2026-84083
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmapwrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands...