12845 matches found
WordPress plugin Dental Care CPT: Code-related vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
Incus injection vulnerability
Incus is a system container and virtual machine manager developed by LXC. Versions of Incus prior to 6.20.0 have a vulnerability that allows for injection attacks. This vulnerability stems from the ability to add arbitrary lifecycle hooks in container configurations through line breaks, potential...
Important: java-21-openjdk security update
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpng:...
20,000 WordPress Sites Affected by Backdoor Vulnerability in LA-Studio Element Kit for Elementor WordPress Plugin
On January 12th, 2026, we received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than 20,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to create malicious administrator users...
CERTFR-2026-ACT-003
creationtimestamp| type| source ---|---|--- 2026-01-21 16:30:00+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115934035856124849...
CVE-2026-1290 [PI141230] Fixed A broken access control issue.
Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...
CVE-2026-0663
creationtimestamp| type| source ---|---|--- 2026-01-21 12:38:15+00:00| seen| https://gist.github.com/Darkcrai86/ffc2c39e0ab14b8a673afc12545ffe36 2026-01-21 13:58:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcwtd36y3e2m...
CVE-2026-24061
creationtimestamp| type| source ---|---|--- 2026-01-21 08:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcw7ecrteg25 2026-01-21 09:38:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcwers7abk2t 2026-01-21 12:18:21+00:00| seen|...
EUVD-2026-3693
Not used...
EUVD-2026-3564
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 an...
Jamf Pro security vulnerabilities
Jamf Pro is a set of Apple device management solutions provided by the American company Jamf. Versions 11.20 to 11.24 of Jamf Pro contain security vulnerabilities. These vulnerabilities stem from critical weaknesses that allow authentication bypass, potentially causing unspecified impacts...
CVE-2026-22022
Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...
CVE-2026-21975
creationtimestamp| type| source ---|---|--- 2026-01-20 23:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvdss4f272g 2026-01-21 08:16:57+00:00| seen| https://gist.github.com/Darkcrai86/58c524eb3766770755055392d271183e 2026-01-21 16:30:19+00:00| seen|...
CVE-2026-21988
...
CVE-2026-21982
...
CVE-2026-21978
...
CVE-2026-21971
...
CVE-2026-21962
...
CVE-2026-21960
CVE-2026-21960 affects Oracle E-Business Suite Applications DBA (Java utils) for versions 12.2.3–12.2.15. The vulnerability enables a high-privileged, network-accessible attacker (via HTTP) to compromise Oracle Applications DBA, potentially causing unauthorized creation/deletion/modification of d...