ROOT-OS-UBUNTU-2204-CVE-2025-68263 CVE-2025-68263 in linux - Patched by Root

Root has patched CVE-2025-68263 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-18723

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

CVE-2026-18723 diaowen DWSurvey Survey Status up-survey-status.do improper authorization

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

EUVD-2026-52572

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

CVE-2026-18723

CVE-2026-18723 affects diaowen DWSurvey up to version 6.14.0. The vulnerability lies in an unknown function within /api/dwsurvey/app/survey/up-survey-status.do of the Survey Status Handler, leading to improper authorization. Exploitation could be remote (network vector) with low privileges requir...

GHSA-G6CJ-PR64-35W5

creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...

CVE-2026-48317

creationtimestamp| type| source ---|---|--- 2026-08-03 23:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzx7udf2f...

GHSA-M2H6-J472-RP4C

creationtimestamp| type| source ---|---|--- 2026-08-03 22:31:31+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f 2026-08-04 00:00:43+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f...

CVE-2026-40717

creationtimestamp| type| source ---|---|--- 2026-08-03 18:27:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032986315511601...

CVE-2026-64547

creationtimestamp| type| source ---|---|--- 2026-08-03 17:03:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3ms6y4fuezx24 2026-08-03 17:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117032656220022667...

CVE-2026-18651

creationtimestamp| type| source ---|---|--- 2026-08-03 16:00:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032406804696114...

EUVD-2026-52267

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

CVE-2026-18600

GL.iNet GL-MT3000 devices (firmware up to 4.4.5) are affected by a vulnerability in the Network Lua RPC Plugin, specifically in network.switch_info/network.switch_status in /usr/lib/oui-httpd/rpc/network. Manipulating the switch argument enables remote command injection. The exploit has been publ...

CVE-2026-18600

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

EUVD-2026-52265

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

CVE-2026-16300

creationtimestamp| type| source ---|---|--- 2026-08-03 09:02:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030756328811295 2026-08-03 16:50:31+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xecb7dh2i...

CVE-2026-16563

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

CVE-2026-9593

creationtimestamp| type| source ---|---|--- 2026-08-03 06:30:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/117030168375818784...

CVE-2026-16564 Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

EUVD-2026-52183

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...