1010 matches found
CVE-2026-22998 affecting package kernel for versions less than 5.15.200.1-1
CVE-2026-22998 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-47911 affecting package helm for versions less than 3.14.2-10
CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...
CVE-2025-39795 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39795 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38391 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38391 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39798 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39798 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38574 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38574 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39693 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39693 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38502 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38502 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38473 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38473 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38528 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38528 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3
CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3. A patched version of the package is available...
CVE-2026-24960
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through 2.0.2...
CVE-2026-2994
Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via groupid parameter which can leads to a security bypass since changes are saved prior to checking the CSRF token. The Concrete CMS security team gave this vulnerabilit...
CVE-2026-3242
In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks M3dium for reporting...
WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Charety versions 2.0.2...
CVE-2026-3431 Sim Studio AI - MongoDB SSRF and Arbitrary Document Deletion
On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions. An attacker can leverage these endpoints to connect to any reachable MongoDB instance and perform unauthorized operations including...
CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5
CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...
PT-2026-22377
Name of the Vulnerable Software and Affected Versions @fastify/middie versions prior to 9.2.0 Description A flaw exists in @fastify/middie that can lead to authentication or authorization bypass when path-scoped middleware is used, such as with app.use'/secret', auth. This occurs when Fastify...
