CVE-2019-2320

creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2022-25678

creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2025-14978

The PeachPay — Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the ConvesioPay webhook REST endpoint in all versions up to, and including,...

CVE-2025-14978 PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification

The PeachPay — Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the ConvesioPay webhook REST endpoint in all versions up to, and including,...

CVE-2025-14978 PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification

The PeachPay — Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the ConvesioPay webhook REST endpoint in all versions up to, and including,...

SUSE CVE-2026-1200

A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the increaseBufferTo function. This vulnerability can lead to memory corruption problems and potentially other consequences...

PT-2026-3531

The PeachPay — Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the ConvesioPay webhook REST endpoint in all versions up to, and including,...

Debian dla-4444 : liblog4j2-java - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4444 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4444-1 [email protected] https://www.debian.org/lts/security/...

PT-2026-3611

Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...

MedDream PACS Premium Cross-site Scripting Vulnerability

MedDream PACS Premium is an enterprise-level image storage and management server suite developed by MedDream Corporation. Version 7.3.6.870 of MedDream PACS Premium contains a cross-site scripting vulnerability. This vulnerability stems from the status parameter in the config.php function, which...

Linux Distros Unpatched Vulnerability : CVE-2026-23952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference...

MiracleLinux 8 : vim-8.0.1763-16.el8.4 (AXSA:2022-3035:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3035:01 advisory. vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when...

MiracleLinux 8 : gnupg2-2.2.20-3.el8 (AXSA:2022-3833:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3833:01 advisory. gpg: Signature spoofing via status line injection CVE-2022-34903 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

MiracleLinux 9 : gnupg2-2.3.3-2.el9 (AXSA:2022-4062:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4062:02 advisory. gpg: Signature spoofing via status line injection CVE-2022-34903 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

CVE-2026-1174

creationtimestamp| type| source ---|---|--- 2026-01-19 22:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcsppzqlxd2c...

CVE-2026-1173

creationtimestamp| type| source ---|---|--- 2026-01-19 22:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcspie6mxw2t...

WordPress PeachPay - Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) plugin <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification vulnerability

WordPress PeachPay - Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin = 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugi...

GHSA-PJ3M-GMQ8-2R57

creationtimestamp| type| source ---|---|--- 2026-01-19 21:17:56+00:00| seen| Telegram/cDsTcRvxLH3SsCe0HOkAWriHJ6FleQF80u2lFTjRmosN9Yo...

GHSA-WR3C-345M-43V9

creationtimestamp| type| source ---|---|--- 2026-01-19 09:59:15+00:00| seen| https://bsky.app/profile/sublimer.mstdn.sublimer.me.ap.brid.gy/post/3mcrevnz2zq42...

ROS-20260119-7305

A vulnerability in the uvcstatusinit function of the Linux operating system kernel is associated with a memory re-release error. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...