473137 matches found
WordPress Booking for Appointments and Events Calendar plugin 1.2.32-2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval vulnerability
Amelia Customer+ Appointment Status Update and Self-Approval vulnerability discovered by Louise in WordPress Plugin Amelia versions 1.2.32-2.4.8...
CVE-2026-17522 Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter into its own options, allowing attackers to make a logged in administrator overwrite arbitrary Newsletters WordPress plugin...
WordPress Newsletters plugin < 4.17 - Arbitrary Plugin Option Update vulnerability
Arbitrary Plugin Option Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin Newsletters versions 4.17...
EUVD-2026-68042
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
OPENSUSE-SU-2026:11642-1 java-21-openj9-21.0.12.1-1.1 on GA media
These are all security issues fixed in the java-21-openj9-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11640-1 java-17-openj9-17.0.20.1-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11641-1 java-1_8_0-openj9-1.8.0.504-1.1 on GA media
These are all security issues fixed in the java-180-openj9-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11645-1 tuxguitar-2.1.0-1.1 on GA media
These are all security issues fixed in the tuxguitar-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11643-1 java-25-openj9-25.0.4.1-1.1 on GA media
These are all security issues fixed in the java-25-openj9-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001508)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001508 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The rule activity upda...
openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21670-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21670-1 advisory. Changes in cloudflared: - Update version to 2026.8.2 Update vendor archive to fix github.com/go-chi/chi/v5 boo1276196, CVE-2026-72815,...
OPENSUSE-SU-2026:11644-1 lact-0.10.0-1.1 on GA media
These are all security issues fixed in the lact-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2026-42985
Snipe-IT has an Improper Privilege Management issue...
CVE-2026-13734 Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack
Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...
EUVD-2026-42984
Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update...
SUSE-SU-2026:3868-1 Security update for quagga
This update for quagga fixes the following issue: - CVE-2026-37458: missing input validation in the MPREACHNLRI component allows authenticated attackers to cause a DoS via a crafted UPDATE message bsc1263974...
SUSE-SU-2026:3867-1 Security update for rsyslog
This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...
CVE-2026-82271
R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users'...
[SECURITY] Fedora 44 Update: bluez-5.87-6.fc44
Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...