6345 matches found
CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
CVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
CVE-2026-49759 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-49759 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
CVE-2026-48858 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-48858 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
EUVD-2026-37812
BBOT: Path traversal Zip-Slip in unarchive module - incomplete fix for CVE-2025-10284...
EUVD-2025-210250
Unauthenticated SQL Injection in Advanced Ads – Tracking 3.0.7 versions...
EUVD-2026-37621
Unauthenticated SQL Injection in JetEngine 3.8.9.1 versions...
EUVD-2025-210212
Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all...
EUVD-2025-210211
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List DACLs on the service object and related registry keys,. Produc...
CVE-2026-20265
Splunk AI Toolkit has a vulnerability in versions below 5.7.4 where a low-privilege user (not admin/power) can cause the toolkit to issue outbound HTTP requests to an attacker-controlled server due to an insecure default domain allowlist. This could enable data exfiltration. Root cause: outbound ...
CVE-2026-20265 Insecure Default Domain Allowlist in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists...
CVE-2025-15657
Unauthenticated Insecure Direct Object References IDOR in School Management = 93.1.0 versions...
CVE-2026-54811
Unauthenticated SQL Injection in WP eMember v10.9.4 versions...
CVE-2026-42629
Unauthenticated Broken Authentication in PowerPack Pro for Elementor v2.13.0 versions...
CVE-2026-41557
Unauthenticated Cross Site Scripting XSS in Kapee 1.7.1 versions...