2387 matches found
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin, affecting versions through 1.3.1 , contains a vulnerability due to the lack of capability or nonce checks on the action that creates and activates its bundled child theme. This allows any authenticated user, such as a subscriber , to switch the site...
EUVD-2026-109231
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...
CVE-2026-107887 Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...
ROOT-APP-NPM-NSWG-ECO-17 NSWG-ECO-17 in jsonwebtoken - Patched by Root
Root has patched NSWG-ECO-17 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-9076 CVE-2026-9076 in openssl - Patched by Root
Root has patched CVE-2026-9076 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root
Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2024-28182 CVE-2024-28182 in nghttp2 - Patched by Root
Root has patched CVE-2024-28182 in the nghttp2 package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2023-46853 CVE-2023-46853 in memcached - Patched by Root
Root has patched CVE-2023-46853 in the memcached package for Root:Alpine:3.17. Multiple fixed versions available...
Astra Linux – Vulnerability in Linux, Linux 5.10
The function mcbausbstartxmit in the file drivers/net/can/usb/mcbausb.c within the Linux kernel, up to version 5.17.1, contains a double-free...
Astra Linux – Vulnerability in Linux, Linux 5.10
The drivers/block/floppy.c file in the Linux kernel before version 5.17.6 is vulnerable to a denial-of-service attack due to a concurrency issue after deallocating rawcmd in the rawcmdioctl function...
Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-databind jar
Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515 reported for jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.56 bug fix and security update
Red Hat OpenShift Container Platform release 4.17.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...
CVE-2026-17784 vulnerabilities
Vulnerabilities for packages: chromium...
MiracleLinux 8 : java-17-openjdk-17.0.20.0.8-1.1.el8 (AXSA:2026-1403:11)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1403:11 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...
Photon OS 5.0: Openjdk17 PHSA-2023-5.0-91-0028
An update of the openjdk17 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0028. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-15830
An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...
CLSA-2026-1784683085 TuxCare security update for jsonwebtoken (1 CVE)
TuxCare rebuilt jsonwebtoken to address 1 CVE. Fixed in 0.3.0-tuxcare.1...