6735 matches found
CVE-2026-39484 WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-39484
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-1839
A flaw was found in HuggingFace Transformers. A remote attacker can exploit this vulnerability by supplying a specially crafted checkpoint file e.g., rngstate.pth. The loadrngstate method in the Trainer class loads this file using torch.load without proper validation, specifically missing the...
EUVD-2026-19612
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox 149.0.2...
EUVD-2026-19610
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...
CVE-2026-5735
Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird...
CVE-2026-5734
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was...
WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Softlab Core versions 1.2.11...
PYSEC-2026-2288
A vulnerability in the HuggingFace Transformers library, specifically in the Trainer class, allows for arbitrary code execution. The loadrngstate method in src/transformers/trainer.py at line 3059 calls torch.load without the weightsonly=True parameter. This issue affects all versions of the...
CVE-2026-1839
CVE-2026-1839 concerns the HuggingFace Transformers library, affecting the Trainer class. The root cause is an unsafe load in src/transformers/trainer.py: _load_rng_state() calls torch.load() without weights_only=True, which can allow arbitrary code execution when loading a malicious checkpoint (...
PT-2026-30826
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Thunderbird versions prior to 149.0.2 Description Memory safety bugs exist in Firefox 149.0.1 and Thunderbird 149.0.1. These bugs demonstrate evidence of memory corruption, and it is presumed that, with...
CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2
CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2. A patched version of the package is available...
CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3
CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...
CVE-2025-38426 affecting package kernel for versions less than 6.6.130.1-3
CVE-2025-38426 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...
CVE-2025-6141 affecting package ncurses for versions less than 6.4-3
CVE-2025-6141 affecting package ncurses for versions less than 6.4-3. An upgraded version of the package is available that resolves this issue...
CVE-2026-2369 affecting package libsoup for versions less than 3.4.4-14
CVE-2026-2369 affecting package libsoup for versions less than 3.4.4-14. A patched version of the package is available...
CVE-2025-71203 affecting package kernel for versions less than 6.6.130.1-3
CVE-2025-71203 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...
CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16
CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16. A patched version of the package is available...