WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...

WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions 4.16.6...

GO-2023-1723 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2026-4465 vulnerabilities

Vulnerabilities for packages: spicedb-fips, spicedb...

GO-2026-4779 vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

GO-2024-2851 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5528 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5675 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-3242 vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

GO-2023-2166 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2597 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2716 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2939 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2026-5609 vulnerabilities

Vulnerabilities for packages: openbao...

WordPress ProSolution WP Client plugin < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls vulnerability

Subscriber+ proSolajaxTablesync and proSolajaxClearlog Calls vulnerability discovered by Nir Yehoshua in WordPress Plugin ProSolution WP Client versions 2.0.9...

JLSEC-2026-1329 In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...

In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not...

EUVD-2026-58597

The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.2 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as confirmed and, in a...

CVE-2021-3777 vulnerabilities

Vulnerabilities for packages: arangodb...

PT-2026-72010

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An information disclosure issue exists in the 'getAttributeViewBacklinks' endpoint. The system incorrectly consults the forbidden access list instead of the visibility list when filtering backlinks...

Linux Distros Unpatched Vulnerability : CVE-2026-72815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the...