65 matches found
WordPress < 7.0.3 - CSS Injection vulnerability
CSS Injection vulnerability discovered by Anthropic in WordPress core versions 7.0.3...
CVE-2026-17793
Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
PT-2026-60369
Impact Users below report issues for unreleased versions threshold can assign unreleased product versions. Patches - https://github.com/mantisbt/mantisbt/commit/17072d4c322c85f7135ebec3417a6d90b525d12f Workarounds None Resources - https://mantisbt.org/bugs/view.php?id=37065 Credits MantisBT thank...
CVE-2026-46170 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-46170 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53080 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53080 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
NPM: OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows
NPM: OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows vulnerability discovered by ? in WordPress Npm openclaw versions 2026.5.27...
CVE-2026-13845
Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-54190
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Autofill feature allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures o...
CVE-2026-45445 affecting package edk2 for versions less than 20240524git3e722403cd16-18
CVE-2026-45445 affecting package edk2 for versions less than 20240524git3e722403cd16-18. A patched version of the package is available...
CVE-2026-6429 affecting package curl for versions less than 8.11.1-8
CVE-2026-6429 affecting package curl for versions less than 8.11.1-8. A patched version of the package is available...
CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1
CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-39821 affecting package cri-tools for versions less than 1.32.0-6
CVE-2026-39821 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...
CVE-2026-33190 affecting package coredns for versions less than 1.11.4-16
CVE-2026-33190 affecting package coredns for versions less than 1.11.4-16. A patched version of the package is available...
CVE-2026-6846 affecting package gdb for versions less than 13.2-8
CVE-2026-6846 affecting package gdb for versions less than 13.2-8. A patched version of the package is available...
WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by hhhai in WordPress Plugin Smart Coupons for WooCommerce versions 2.3.0...
CVE-2026-31407 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-31407 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-31476 affecting package kernel for versions less than 6.6.134.1-2
CVE-2026-31476 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2026-23404 affecting package kernel for versions less than 6.6.130.1-1
CVE-2026-23404 affecting package kernel for versions less than 6.6.130.1-1. A patched version of the package is available...
CVE-2026-28755 affecting package nginx for versions less than 1.22.1-16
CVE-2026-28755 affecting package nginx for versions less than 1.22.1-16. A patched version of the package is available...
CVE-2026-27183
OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wrapper approval requirements. The approval classifier and execution planner apply different depth-boundary rules, permitting exactl...