6735 matches found
CVE-2026-27447 affecting package cups for versions less than 2.4.17-1
CVE-2026-27447 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-32316 affecting package jq for versions less than 1.7.1-5
CVE-2026-32316 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-34980 affecting package cups for versions less than 2.4.17-1
CVE-2026-34980 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-39979 affecting package jq for versions less than 1.7.1-5
CVE-2026-39979 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-33948 affecting package jq for versions less than 1.7.1-5
CVE-2026-33948 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-33947 affecting package jq for versions less than 1.7.1-5
CVE-2026-33947 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...
📄 Below Symlink Privilege Escalation
This Python script demonstrates a potential privilege escalation technique related to CVE-2025-27591, leveraging symbolic link symlink manipulation in a logging directory used by the below utility. Versions prior to 0.9.0 are affected...
📄 Below Log File Symlink Privilege Escalation
This Metasploit module exploits a local privilege escalation vulnerability in the below utility when executed with sudo. This affects versions prior to 0.9.0. ================================================================================================================================== | Title...
Siemens SICAM 8 Products Allocation of Resources Without Limits or Throttling (CVE-2026-27663)
A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.10. The affected application contains denial-of-service DoS vulnerability. The remote operation mode is susceptible to a resource exhaustion condition when subjected to a high volume of requests. Sendi...
CVE-2026-31014
Versions prior to 4.0.0.5 of Dovestones Softwares AD Self Update (a self-service catalog information update tool by Infoopia) are vulnerable to Cross-Site Request Forgery (CSRF) . The root cause is the lack of CSRF token protection at the affected endpoint, which processes state-changing requests...
WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions 5.9.0...
WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Elementra versions = 1.0.9...
Using Vulnerable Libssh Version < 0.12 in Sentry
Created Date Apr 20, 2026 4:12:24 AM...
Tenable Identity Exposure < 3.77.17 Multiple Vulnerabilities (TNS-2026-11)
The version of the Tenable Identity Exposure running on the remote host is prior to 3.77.17. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2026-11: - A flaw in Node.js's Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictio...
CVE-2026-34445 affecting package pytorch for versions less than 2.2.2-14
CVE-2026-34445 affecting package pytorch for versions less than 2.2.2-14. A patched version of the package is available...
WordPress WpStream plugin < 4.11.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Muhammad Sharief in WordPress Plugin WpStream versions 4.11.2...
CVE-2026-33672 affecting package nodejs24 for versions less than 24.14.1-2
CVE-2026-33672 affecting package nodejs24 for versions less than 24.14.1-2. A patched version of the package is available...
CVE-2026-33671 affecting package nodejs24 for versions less than 24.14.1-2
CVE-2026-33671 affecting package nodejs24 for versions less than 24.14.1-2. A patched version of the package is available...
CVE-2026-31843
The goodoneuz/pay-uz Laravel package = 2.2.24 contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remot...