2935294 matches found
CVE-2026-88014
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...
CVE-2026-81052
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2022-26xx9
CVE-2022-26xx9 CVE-2022-26xx9...
CVE-2026-73787
creationtimestamp| type| source ---|---|--- 2026-09-10 16:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f...
CVE-2026-84819
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
CVE-2026-81791
Subscriber Cross Site Scripting XSS in EventON = 2.5.7 versions...
UBUNTU-CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
CVE-2026-84373 vulnerabilities
Vulnerabilities for packages: homepage, langfuse, vitess, langfuse-fips, gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-82FW-GWWQ-J7X9 vulnerabilities
Vulnerabilities for packages: homepage, langfuse, vitess, langfuse-fips, gitlab-rails-ce-fips, gitlab-rails-ce...
EUVD-2026-75512
Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...
CVE-2026-88871
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/CustomizeUser/setSubscribers.json.php endpoint. The script reads usersid and ExtraSubscribers from $REQUEST and calls...
CVE-2026-12682
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319...
WordPress WPMK Block plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin WPMK Block versions = 1.0.1...
ROOT-OS-ALPINE-318-CVE-2025-29087 CVE-2025-29087 in sqlite - Patched by Root
Root has patched CVE-2025-29087 in the sqlite package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69421 CVE-2025-69421 in openssl - Patched by Root
Root has patched CVE-2025-69421 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-28388 CVE-2026-28388 in openssl - Patched by Root
Root has patched CVE-2026-28388 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69419 CVE-2025-69419 in openssl - Patched by Root
Root has patched CVE-2025-69419 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69420 CVE-2025-69420 in openssl - Patched by Root
Root has patched CVE-2025-69420 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...