Lucene search
+L

22645 matches found

EUVD
EUVD
added 2026/01/08 2:0 p.m.17 views

EUVD-2026-1670

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions up to and including 1.5.0, the application checks the validity of the username but appears to skip, misinterpret, or incorrectly validate the password when the provided username matches a...

9.4CVSS6.3AI score0.02169EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/01/08 1:54 p.m.13 views

Moderate: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

4.3CVSS6.6AI score0.00353EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/08 10:17 a.m.7 views

RHSA-2026:0203 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

8.1CVSS6.9AI score0.00697EPSS
SaveExploits0References12
NVD
NVD
added 2026/01/08 10:15 a.m.7 views

CVE-2025-67926

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.10.4...

6.5CVSS0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/08 9:17 a.m.35 views

CVE-2025-67926 WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.10.4...

6.5CVSS0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/08 9:17 a.m.4 views

CVE-2025-67926 WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.10.4...

6.5CVSS6.6AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/08 9:17 a.m.19 views

CVE-2025-67926

CVE-2025-67926 is a public WordPress vulnerability described by Wordfence in the January 2026 weekly vulnerability report. It is a Missing Authorization issue in Fluent Support (WordPress plugin) where access control is incorrectly configured, affecting Fluent Support versions up to 1.10.4. The C...

6.5CVSS6.6AI score0.00257EPSS
SaveExploits0References1
Fedora
Fedora
added 2026/01/08 1:28 a.m.11 views

[SECURITY] Fedora 43 Update: python-pdfminer-20251230-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00309EPSS
SaveExploits9
RedHat Linux
RedHat Linux
added 2026/01/08 12:47 a.m.15 views

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS7AI score0.00344EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.10 views

PT-2026-3412

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

3.7CVSS6.6AI score
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.9 views

WordPress plugin Fluent Support 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.6AI score0.00257EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.12 views

PT-2026-1902

Name of the Vulnerable Software and Affected Versions Shahjahan Jewel Fluent Support versions through 1.10.4 Description An authorization issue exists in Fluent Support that allows exploitation of incorrectly configured access control security levels. Recommendations Versions prior to and includi...

8.8CVSS6.5AI score0.00257EPSS
SaveExploits0References4
CBLMariner
CBLMariner
added 2026/01/07 7:9 p.m.6 views

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

4.9CVSS6.9AI score0.0014EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/01/07 6:34 p.m.17 views

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.7.4 release.

Red Hat Developer Hub 1.7.4 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

8.7CVSS6.8AI score0.0309EPSS
SaveExploits4References14
Microsoft Secure
Microsoft Secure
added 2026/01/07 5:0 p.m.13 views

Explore the latest Microsoft Incident Response proactive services for enhanced resilience

As cyberthreats become faster, harder to detect, and more sophisticated, organizations must focus on building resilience—strengthening their ability to prevent, withstand, and recover from cybersecurity incidents. Resilience can mean the difference between containing an incident with minimal...

5.6AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2026/01/07 5:0 p.m.11 views

Explore the latest Microsoft Incident Response proactive services for enhanced resilience

As cyberthreats become faster, harder to detect, and more sophisticated, organizations must focus on building resilience—strengthening their ability to prevent, withstand, and recover from cybersecurity incidents. Resilience can mean the difference between containing an incident with minimal...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/01/07 4:9 p.m.18 views

Important: Red Hat Security Advisory: libpng security update

An update for libpng is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.1CVSS6.5AI score0.00407EPSS
SaveExploits4References2
NVD
NVD
added 2026/01/07 12:16 p.m.13 views

CVE-2025-14057

The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 17.0.39 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS0.00311EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/01/07 10:20 a.m.11 views

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

8.6CVSS6.4AI score0.00697EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:30 a.m.15 views

CVE-2019-16540

A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master...

6.5CVSS6.7AI score0.01606EPSS
SaveExploits0References1
Rows per page
Query Builder