6392 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-2807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so...
CVE-2026-22717
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...
CVE-2026-22717
CVE-2026-22717 is an out-of-bounds read vulnerability in VMware Workstation
CVE-2026-3327
Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...
CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11
CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11. A patched version of the package is available...
CVE-2026-3327 Authenticated DatoCMS Web Previews Plugin Iframe Injection
Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...
CVE-2026-3327 Authenticated DatoCMS Web Previews Plugin Iframe Injection
Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...
WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pizza House versions = 1.4.0...
CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-5
CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...
CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5
CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...
CVE-2026-21863 affecting package valkey for versions less than 8.0.7-1
CVE-2026-21863 affecting package valkey for versions less than 8.0.7-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-27211 affecting package cloud-hypervisor for versions less than 48.0.246-2
CVE-2026-27211 affecting package cloud-hypervisor for versions less than 48.0.246-2. A patched version of the package is available...
PT-2026-22377
Name of the Vulnerable Software and Affected Versions @fastify/middie versions prior to 9.2.0 Description A flaw exists in @fastify/middie that can lead to authentication or authorization bypass when path-scoped middleware is used, such as with app.use'/secret', auth. This occurs when Fastify...
CVE-2026-24882 affecting package gnupg2 for versions less than 2.4.0-3
CVE-2026-24882 affecting package gnupg2 for versions less than 2.4.0-3. A patched version of the package is available...
WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Welldone versions = 2.4...
WordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Sweet Jane versions = 1.2...
SUSE CVE-2026-2765
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
SUSE CVE-2026-2780
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...