165 matches found
CVE-2025-49901
CVE-2025-49901 WordPress Simple Link Directory Plugin 14.8.1 is vulnerable to a high priority Broken Authentication ╔═══════════════════════════════════════════════════════════════════╗ ║ CVE-2025-49901 · Simple Link Directory · qc-opd ║ ║ Authentication Bypass → Password Reset → RCE ║...
PT-2026-115909
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...
PT-2026-115921
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...
PT-2026-115897
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...
PT-2026-109268
Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version...
CVE-2026-14189 WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields
The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to perform SQL injection that executes when a visitor triggers a search...
CVE-2026-14189
The WPBot WordPress plugin (versions before 8.5.2 ) is vulnerable to a second-order SQL injection because it fails to validate administrator-configured field identifiers before utilizing them in a SQL query. This flaw allows users with administrator access to perform SQL injection, which is subse...
CVE-2026-46590
Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManager and AwsSecretsManagerKeyLifecycleManager read that metadat...
CVE-2026-45855
The CVE-2026-45855 issue affects the Linux kernel’s libata-scsi component, where NCQ command traffic could starve non-NCQ commands in multi-queue hosts. Root cause: mixing NCQ and non-NCQ can delay non-NCQ execution when NCQ is in-flight. The fix implements forward progress for non-NCQ commands b...
SUSE CVE-2026-23355
In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in atascsideferredqcwork, caused by ap-ops-qcdefer returning non-zero before issuing the deferred qc. atascsischeduledeferredqc is called during...
EUVD-2026-15330
In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in atascsideferredqcwork, caused by ap-ops-qcdefer returning non-zero before issuing the deferred qc. atascsischeduledeferredqc is called during...
CVE-2026-23355
In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in atascsideferredqcwork, caused by ap-ops-qcdefer returning non-zero before issuing the deferred qc. atascsischeduledeferredqc is called during...
CVE-2026-23355
In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in atascsideferredqcwork, caused by ap-ops-qcdefer returning non-zero before issuing the deferred qc. atascsischeduledeferredqc is called during...
CVE-2026-23355
The CVE-2026-23355 issue affects the Linux kernel libata subsystem. It describes a defect where queued work for a deferred command (deferred_qc) is not canceled when cleared, allowing a WARN_ON() condition to fire later if ap->ops->qc_defer() returns non-zero. The root cause is that, althou...
CVE-2026-23355 ata: libata: cancel pending work after clearing deferred_qc
In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in atascsideferredqcwork, caused by ap-ops-qcdefer returning non-zero before issuing the deferred qc. atascsischeduledeferredqc is called during...
flexget (3.6.5), oarepo (11.0.28) +1 more potentially affected by CVE-2026-27205 via flask (2.2.4)
flask PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flexget 3.6.5 - oarepo 11.0.28 - rapid-qc-ms =1.0.0, =1.1.0 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...
flexget (3.6.5), oarepo (11.0.28) +1 more potentially affected by CVE-2026-27205 via flask (2.2.4)
flask PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flexget 3.6.5 - oarepo 11.0.28 - rapid-qc-ms =1.0.0, =1.1.0 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...
argovishelpers (>=0.0.23, <=0.0.32), brdr (0.1.0) +22 more potentially affected by CVE-2025-69662 via geopandas (0.14.3)
geopandas PYPI version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - argovishelpers =0.0.23, =0.4.2, =0.0.1, =2024.2.5, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =1.54.5, =0.0.0, =1.2.2, =1.2.9, =0.0.4, =0.0.1, =0.0.15 a...
Efacec QC security vulnerabilities
Efacec QC is a series of electric vehicle charging posts from Efacec Portugal. A security vulnerability exists in the Efacec QC 60/90/120, which originates from a network connection where an attacker could detect plaintext credentials...
Efacec QC security vulnerabilities
Efacec QC is a series of electric vehicle charging posts from Efacec Portugal. A security vulnerability exists in Efacec QC that stems from a lack of privilege control over user XXX, which could lead to unlimited privilege elevation...