50826 matches found
Security Bulletin: IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability (CVE-2026-8405)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-8405 DESCRIPTION: IBM Guardium Data Protection's add-on feature of Guardium Data Protection named "Long Term Retention" LTR can expose sensitive credentials in debug mode...
WordPress Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget plugin <= 3.0.2 - Missing Authorization to Authenticated (Contributor+) Block Settings Modification and Cache Purging vulnerability
Missing Authorization to Authenticated Contributor+ Block Settings Modification and Cache Purging vulnerability discovered by momopon1415 in WordPress Plugin Location Weather versions = 3.0.2...
CVE-2026-6841
Request Tracker is vulnerable to a reflected cross-site scripting XSS vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary JavaScript execution in the victim’s browser. This vulnerability affects versions from 5.0.4 up to 5.0....
CVE-2026-44049
creationtimestamp| type| source ---|---|--- 2026-05-21 12:25:12+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmeg2isdcl2y 2026-05-22 08:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmghqclnym26...
RUSTSEC-2026-0208 Potential Panic in AVX2 SHAKE-256
The AVX2-optimized implementation of SHAKE-256 intended for use in ML-KEM and ML-DSA would panic if the length of the output buffers was greater than 32 and not a multiple of 8, due to an out-of-bounds indexing operation. Impact This bug impacts users on AVX2 platforms that use the...
CVE-2026-6841 Reflected XSS in Request Tracker
Request Tracker is vulnerable to a reflected cross-site scripting XSS vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary JavaScript execution in the victim’s browser. This vulnerability affects versions from 5.0.4 up to 5.0....
WordPress Avada (Fusion) Builder plugin <= 3.15.2 - Unauthenticated Remote Code Execution vulnerability
Unauthenticated Remote Code Execution vulnerability discovered by ? in WordPress Plugin Fusion Builder versions = 3.15.2...
CVE-2026-44060
creationtimestamp| type| source ---|---|--- 2026-05-21 11:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmebzox3tw2c 2026-05-22 07:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgeetzwa72t...
CVE-2026-23734
creationtimestamp| type| source ---|---|--- 2026-05-21 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116612099529875004 2026-05-21 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mme7ngimaj23...
CVE-2026-44062
creationtimestamp| type| source ---|---|--- 2026-05-21 10:22:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mme76734nx2i 2026-05-22 07:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgef3qb4h2z...
CVE-2026-48151
creationtimestamp| type| source ---|---|--- 2026-05-21 08:47:15+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-qhv3-wjg8-6fx6 2026-05-27 19:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6xo2nd72w 2026-05-27...
CVE-2026-48150
creationtimestamp| type| source ---|---|--- 2026-05-21 08:46:30+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-6xp4-cf37-ppjh 2026-05-27 19:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6xgnpmn2g 2026-05-27...
CVE-2026-4055
Mattermost versions 11.5.x = 11.5.1 fail to validate team-level runcreate permission against the target team when creating a playbook run which allows an authenticated team member to create runs in teams where they lack permission via specifying a different team ID in the run creation API request...
CVE-2026-44065
An off-by-two error in lpwrite in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data...
CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SZ14466 Security fixes for CVE-2025-13151, CVE-2026-22695, CVE-2026-22801, CVE-2026-24515, CVE-2026-25210, ghsa-72hv-8253-57qq applied in versions: 3.7.2-r4, 3.7.2-r5, 3.7.2-r6
Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-0393
creationtimestamp| type| source ---|---|--- 2026-05-21 08:04:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116611525732424159 2026-05-21 13:23:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmejccu2kg2p 2026-05-22 12:14:32+00:00| seen|...
CVE-2026-44068
CVE-2026-44068 affects Netatalk 2.1.0–4.4.2. The issue is an incomplete sanitization of extended attribute (EA) path components, enabling path traversal. A fix is available in Netatalk 4.4.3 (and later). The NVD entry notes a CVSSv3.1 base score of 7.6 (HIGH) with network vector, low attack compl...
CVE-2026-44065
An off-by-two error in lpwrite in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data...
CVE-2026-44065
An off-by-two error in lpwrite in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data...