76 matches found
CVE-2026-74254
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75056
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...
MINI-CWXQ-HJ6X-23C8
Bulletin has no description...
CVE-2026-73194
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68370 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68370 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14
CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2026-57077
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewlin...
Linux Distros Unpatched Vulnerability : CVE-2026-54421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitiv...
PT-2026-48576
Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 24.09.07 Description Improper Control of Generation of Code allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks. This can lead to Remote...
CVE-2026-49777
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...
CVE-2026-49777 WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...
EUVD-2026-34792
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.3. No patched version is available - the vendor has applied a fi...
CVE-2026-49777
CVE-2026-49777 (WordPress Product Slider Pro for WooCommerce
CVE-2026-49777 WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...
CVE-2024-47273
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated users to write specific files via unspecified vectors...