13622 matches found
CVE-2026-25403
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-25403 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-25403
Affected software: WordPress plugin “Ultimate Store Kit Elementor Addons”
CVE-2026-25403 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
EUVD-2026-53938
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2025-11850
When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...
UBUNTU-CVE-2026-64588
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring-ready On weakly-ordered architectures, the store to fiq-ops can be reordered past the store to ring-ready, allowing a CPU that sees ring-ready == true via fuseuringready to dispatch requests...
EUVD-2025-210627
When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...
CVE-2025-11850
When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...
CVE-2025-11850 Improper Implicit Association via User Store Initialization in WSO2 Identity Server [Identity Confusion / External IDP Use]
When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...
CVE-2025-11850
CVE-2025-11850 affects the WSO2 Identity Server: when secondary user stores are configured, the implicit-association resolver can initialize from a secondary store and bypass the primary store during search/uniqueness checks, allowing a subject to be linked to an unintended local account if the s...
CVE-2025-11850 Improper Implicit Association via User Store Initialization in WSO2 Identity Server [Identity Confusion / External IDP Use]
When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...
CVE-2026-64588 fuse-uring: fix data races on ring->ready
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring-ready On weakly-ordered architectures, the store to fiq-ops can be reordered past the store to ring-ready, allowing a CPU that sees ring-ready == true via fuseuringready to dispatch requests...
EUVD-2026-53775
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring-ready On weakly-ordered architectures, the store to fiq-ops can be reordered past the store to ring-ready, allowing a CPU that sees ring-ready == true via fuseuringready to dispatch requests...
CVE-2026-64588
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring-ready On weakly-ordered architectures, the store to fiq-ops can be reordered past the store to ring-ready, allowing a CPU that sees ring-ready == true via fuseuringready to dispatch requests...
CVE-2026-64588
The CVE-2026-64588 entry describes a Linux kernel data-race in fuse-uring on ring->ready. The root cause is a weak-ordering issue where a store to fiq->ops could be reordered past ring->ready, allowing a CPU that observes ring->ready == true to dispatch via a stale fiq->ops pointer...
CVE-2026-67621: Missing Authorization
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...
EulerOS 2.0 SP13 : ca-certificates (EulerOS-SA-2026-2960)
According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...
EulerOS 2.0 SP13 : ca-certificates (EulerOS-SA-2026-3010)
According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...