24561 matches found
CVE-2013-1904
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2895e391-349d-4351-b274-f75a1d633be7 2026-06-23 14:04:08+00:00| exploited|...
MINI-75G6-7WX7-W2GJ
Bulletin has no description...
GHSA-JV2H-4P9V-WF5W
creationtimestamp| type| source ---|---|--- 2026-06-19 16:11:36+00:00| seen| https://gist.github.com/alon710/27a1a02d7c391b1b2590b0cf7da6fc5e...
CVE-2021-32813
creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b38d9801-bfcf-423c-9ccd-800711aea9ec...
CVE-2022-49198
creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/058cafa2-26ca-42a1-a165-03afbaf68788...
CVE-2022-49703
creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7b0c7a4c-cfc7-4f4b-a719-c926fc7cd37f...
CVE-2026-56138
creationtimestamp| type| source ---|---|--- 2026-06-19 11:52:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monbqxae5z2r...
GHSA-8J37-5W68-WJ2G
creationtimestamp| type| source ---|---|--- 2026-06-19 08:41:59+00:00| seen| https://gist.github.com/alon710/9745ea7f614dc3dd47451c872d75fca1...
CVE-2026-3640
The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook endpoint at /wp-json/strabl/webhook/order with a permissioncallback of returntrue, which allows all incoming requests...
CVE-2026-3640 STRABL <= 4.5 - Unauthenticated Arbitrary Webhook Creation via REST API Endpoint
The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook endpoint at /wp-json/strabl/webhook/order with a permissioncallback of returntrue, which allows all incoming requests...
EUVD-2026-37996
The 2Download Connector for 2DL Hosted Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 0.1.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated...
RLSA-2026:25930 Important: postfix security update
The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 For more details about the security issues, including the impact, a CVSS score,...
CVE-2026-6716
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
MINI-XX9H-C97F-3P34
Bulletin has no description...
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 8, 2026 to June 14, 2026)
Last week, there were 102 vulnerabilities disclosed in 90 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 68 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities ...
CVE-2026-48986
pamusb provides hardware authentication for Linux using removable media. In pamusb 0.9.1 and earlier, usbgetprocessparentid can cause an infinite loop DoS because it does not initialize ppid on failure. In pusblocallogin, the same variable is reused as input and output in a process-tree while loo...
CVE-2026-56012
creationtimestamp| type| source ---|---|--- 2026-06-18 17:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mold7plwda23 2026-06-28 10:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpdqknsadc2c...
CVE-2026-44185
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...
SUSE-SU-2026:22159-1 Security update for distribution
This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265788. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation...