6700 matches found
EUVD-2026-51529
Missing authorization in Checkmk 2.5.0p10, 2.4.0p35, 2.3.0p49, and 2.2.0 EOL allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users...
CVE-2026-15227 Missing Authorization Allows Editing of Foreign Reports
Missing authorization in Checkmk 2.5.0p10, 2.4.0p35, 2.3.0p49, and 2.2.0 EOL allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users...
WordPress Customer Switching plugin < 2.1.3 - Customer+ Privilege Escalation to Administrator vulnerability
Customer+ Privilege Escalation to Administrator vulnerability discovered by Mike Gozdiskowski in WordPress Plugin Customer Switching versions 2.1.3...
WordPress Support Genix plugin < 1.4.48 - Unauthenticated Ticket Attachment Download vulnerability
Unauthenticated Ticket Attachment Download vulnerability discovered by Alessandro Greco aka Aleff, Giovanbattista Ianni University of Calabria - UNICAL in WordPress Plugin Support Genix versions 1.4.48...
WordPress JS Help Desk plugin < 3.1.4 - Contributor+ User Email Disclosure vulnerability
Contributor+ User Email Disclosure vulnerability discovered by Vaibhav Narkhede in WordPress Plugin JS Help Desk versions 3.1.4...
CVE-2026-14849
The Paid Membership Subscriptions WordPress plugin (versions before 3.0.7 ) contains an unauthenticated sensitive information exposure vulnerability. The plugin fails to protect member and payment export files, which are written to a predictable location in the uploads directory . This flaw allow...
WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.5 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Trần TIến in WordPress Plugin Ultimate Addons for WPBakery Page Builder versions 3.21.5...
SUSE CVE-2025-11776
Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...
WordPress WP Delicious plugin < 1.10.2 - Unauthenticated Arbitrary Post Meta Update vulnerability
Unauthenticated Arbitrary Post Meta Update vulnerability discovered by Pedro Pinho in WordPress Plugin WP Delicious versions 1.10.2...
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6. A patched version of the package is available...
CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7
CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...
CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29
CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29. A patched version of the package is available...
CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5
CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...
CVE-2026-11622 affecting package bind for versions less than 9.20.26-1
CVE-2026-11622 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package keda for versions less than 2.14.1-16
CVE-2026-56852 affecting package keda for versions less than 2.14.1-16. A patched version of the package is available...
CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7
CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7. A patched version of the package is available...
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...