24687 matches found
PT-2026-3234
Name of the Vulnerable Software and Affected Versions Cost Calculator Builder plugin for WordPress versions prior to 3.7.0 Description The Cost Calculator Builder plugin for WordPress is susceptible to an unauthenticated payment status bypass. This occurs because the complete payment AJAX action ...
MiracleLinux 4 : qemu-kvm-0.12.1.2-2.355.AXS4.5 (AXSA:2013-473:03)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-473:03 advisory. KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running...
MiracleLinux 4 : kernel-2.6.32-696.3.1.el6 (AXSA:2017-1700:04)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1700:04 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...
MiracleLinux 4 : gnupg2-2.0.14-9.AXS4 (AXSA:2018-3257:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3257:01 advisory. gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification CVE-2018-12020 Tenable has...
The Librarian security vulnerability
The Librarian is a personal AI assistant software developed by The Librarian Company in Singapore. The Librarian has a security vulnerability, which stems from the webFetch tool’s ability to retrieve Supervisory Server status pages, potentially leading to the exposure of backend running processes...
MiracleLinux 4 : httpd-2.2.15-31.0.1.AXS4 (AXSA:2014-468:02)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-468:02 advisory. Description : The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2014-0118 The...
MiracleLinux 4 : openssl-1.0.0-27.AXS4.2 (AXSA:2013-168:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-168:01 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001266)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001266 advisory. It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001344)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001344 advisory. An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to...
WordPress Cost Calculator Builder plugin <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass vulnerability
Missing Authorization to Unauthenticated Payment Status Bypass vulnerability discovered by andrea bocchetti in WordPress Plugin Cost Calculator Builder versions = 3.6.9...
WordPress Rede Itaú for WooCommerce - Payment PIX, Credit Card and Debit plugin <= 5.1.2 - Unauthenticated Order Status Manipulation vulnerability
WordPress Rede Itaú for WooCommerce - Payment PIX, Credit Card and Debit plugin = 5.1.2 - Unauthenticated Order Status Manipulation vulnerability discovered by Os in WordPress Plugin Rede Itaú for WooCommerce versions = 5.1.2...
CVE-2025-71166
Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...
CVE-2025-71165
Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...
Exploit for CVE-2026-23550
CYBERDUDEBIVASH Modular DS CVE-2026-23550 Detector Overvie...
CVE-2025-70656
creationtimestamp| type| source ---|---|--- 2026-01-15 17:20:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115900259443300481...
CVE-2025-71130
creationtimestamp| type| source ---|---|--- 2026-01-15 16:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115900047111207536 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...
CVE-2021-47760
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate...
CVE-2026-22645
creationtimestamp| type| source ---|---|--- 2026-01-15 15:12:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...