65 matches found
CVE-2026-55203 affecting package haproxy for versions less than 2.9.11-7
CVE-2026-55203 affecting package haproxy for versions less than 2.9.11-7. A patched version of the package is available...
JLSEC-2026-647 It is possible to cause an use-after-free write in SANM decoding with a carefully crafted...
It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...
CVE-2026-57431
Author Cross Site Scripting XSS in Featured Image = 2.1 versions...
NPM: n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
NPM: n8n: NoSQL Injection in MongoDB Node Find And Replace Operation vulnerability discovered by ? in WordPress Npm n8n versions 2.24.0...
CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1
CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1. A patched version of the package is available...
CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11
CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...
CVE-2025-40948
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.1, RUGGEDCOM ROX MX5000RE All versions V2.17.1, RUGGEDCOM ROX RX1400 All versions V2.17.1, RUGGEDCOM ROX RX1500 All versions V2.17.1, RUGGEDCOM ROX RX1501 All versions V2.17.1, RUGGEDCOM ROX RX1510 All versions V2.17.1...
CVE-2025-69648 affecting package binutils for versions less than 2.41-11
CVE-2025-69648 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...
UBUNTU-CVE-2026-33456
Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...
WordPress Perfmatters plugin <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter vulnerability
Authenticated Subscriber+ Arbitrary File Deletion via 'delete' Parameter vulnerability discovered by hoshino in WordPress Plugin Perfmatters versions = 2.5.9.1...
CVE-2025-33244
NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of...
CVE-2025-11065 affecting package gh for versions less than 2.62.0-13
CVE-2025-11065 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...
CVE-2025-47911 affecting package containerd2 for versions less than 2.0.0-18
CVE-2025-47911 affecting package containerd2 for versions less than 2.0.0-18. A patched version of the package is available...
CVE-2025-58190 affecting package keda for versions less than 2.14.1-11
CVE-2025-58190 affecting package keda for versions less than 2.14.1-11. A patched version of the package is available...
CVE-2025-68554
CVE-2025-68554 affects the Keenarch WordPress theme (versions before 2.0.1). It is an Unrestricted Upload of File with Dangerous Type vulnerability, enabling arbitrary file uploads via Keenarch’s upload handling. Wordfence notes multiple WordPress vulnerability entries and lists Keenarch as patch...
CVE-2025-68554 WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through 2.0.1...
CVE-2025-67995 WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...
CVE-2026-24747 affecting package pytorch for versions less than 2.0.0-13
CVE-2026-24747 affecting package pytorch for versions less than 2.0.0-13. A patched version of the package is available...
CVE-2025-69317
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in scriptsbundle CarSpot carspot allows Reflected XSS.This issue affects CarSpot: from n/a through 2.4.6...