6700 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104794)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104794 advisory. In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be...
NPM: consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
NPM: consciousness-explorer / sublinear-time-solver MCP exportstate has an arbitrary file write vulnerability discovered by ? in WordPress Npm sublinear-time-solver versions 1.6.0...
WordPress RealHomes Memberships plugin < 3.1.0 - Subscriber+ Membership Payment Bypass vulnerability
Subscriber+ Membership Payment Bypass vulnerability discovered by Pablo González and Fran Ramírez in WordPress Plugin RealHomes Memberships versions 3.1.0...
EUVD-2026-64805
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
EUVD-2026-64791
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
PT-2026-80823
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
PT-2026-80839
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
PT-2026-80824
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
OESA-2026-3438 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
OESA-2026-3435 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
CVE-2026-53801 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53801 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53785 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53785 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
EUVD-2026-62934
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...
CVE-2026-44687
An off-by-one error in Unbound's default harden-below-nxdomain logic can lead to a denial of service. When an intermediate label under a DNSSEC-signed zone is queried, the flaw incorrectly bypasses configured stub or forward zones, disrupting their name resolution. Mitigation Disable the...
EUVD-2025-210740
The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the canaccess function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with...
CVE-2026-47729 affecting package squid for versions less than 6.13-5
CVE-2026-47729 affecting package squid for versions less than 6.13-5. A patched version of the package is available...
CVE-2026-57262
A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...
CVE-2026-68106
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0. This causes a division by zero when calculating numdpbbuffer in H264...