24691 matches found
Oracle Linux 10 : kernel (ELSA-2026-23329)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-23329 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...
MINI-76WR-62V2-RCP6
Bulletin has no description...
CVE-2025-71400
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbitrary passkeys by ID. Attackers with valid sessions can submit crafted requests to the delete-passkey endpoint with...
MINI-XHQ9-222M-5326
Bulletin has no description...
MINI-WQRH-VVWF-6XW2
Bulletin has no description...
MINI-V76H-79J6-PQ3J
Bulletin has no description...
MINI-G226-WFR5-M4FV
Bulletin has no description...
CVE-2025-71400 better-auth passkey before 1.4.0 IDOR via delete-passkey
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbitrary passkeys by ID. Attackers with valid sessions can submit crafted requests to the delete-passkey endpoint with...
CVE-2025-71400 better-auth passkey before 1.4.0 IDOR via delete-passkey
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbitrary passkeys by ID. Attackers with valid sessions can submit crafted requests to the delete-passkey endpoint with...
CVE-2025-71400
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbitrary passkeys by ID. Attackers with valid sessions can submit crafted requests to the delete-passkey endpoint with...
EUVD-2025-210591
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbitrary passkeys by ID. Attackers with valid sessions can submit crafted requests to the delete-passkey endpoint with...
CVE-2026-15248
Affected software: Meta Box WordPress plugin (WordPress) prior to 5.13.1. Vulnerability: does not verify that the user is authorized to delete the supplied attachment, enabling a low-privilege user (e.g., Contributor) to permanently delete arbitrary media attachments owned by other users. Root ca...
CVE-2026-14938
CVE-2026-14938 affects the FluentBoards WordPress plugin prior to 1.95.3. The issue: during a board import, the plugin does not verify that selected items belong to a board the requesting user is authorized to access, allowing any authenticated user with member access on a single board to copy/re...
MINI-H57M-F6H8-6QMP
Bulletin has no description...
MINI-QFHC-RXXW-8WGR
Bulletin has no description...
MINI-F98J-4736-VMJH
Bulletin has no description...
MINI-PV2H-JQVM-4WM3
Bulletin has no description...
MINI-J4JR-3668-6R8X
Bulletin has no description...