6345 matches found
NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
CVE-2026-44687
In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the intermediate label's secure NXDOMAIN answer from the parent. This is caused by an off-by-one error in...
CVE-2026-44687
CVE-2026-44687 affects NLnet Labs Unbound releases 1.13.2 through 1.25.1. A bug in the default tallied logic for hardened-below-nxdomain can cause a stub or forward zone to be shadowed by a DNSSEC-secure NXDOMAIN answer at the parent when the query name is an intermediate label below a signed zon...
CVE-2026-44687
In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the intermediate label's secure NXDOMAIN answer from the parent. This is caused by an off-by-one error in...
Plone RestrictedPython < 5.3 / 6.x < 6.1 RCE
The version of RestrictedPython installed on the remote host is prior to 5.3, or 6.x prior to 6.1. It is, therefore, affected by a remote code execution vulnerability due to not checking access to stack frames and their attributes. An authenticated, remote attacker can exploit this to bypass...
CVE-2026-62415
Affected software: Joomla extension Membership Pro (Joomla) prior to version 4.6.2. Issue: default configuration allowed unauthenticated users to upload media assets, enabling potential unauthorized media uploads. No further details on impact, exploit, or fixes are provided in the supplied docume...
NPM: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
NPM: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement vulnerability discovered by ? in WordPress Npm body-parser versions 1.20.6...
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import vulnerability discovered by ? in WordPress Npm directus versions 12.0.0...
CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0
The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access...
CVE-2026-61424 Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE...
CVE-2026-60026 Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1
The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP code execution. Authenticated builder user core.create/core.edit could inject PHP tags in element content, that got executed via view-cache include. Requires caching on default...
CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-58251 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58251 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-58253 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58253 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2025-44904 affecting package hdf5 for versions less than 1.14.6-3
CVE-2025-44904 affecting package hdf5 for versions less than 1.14.6-3. A patched version of the package is available...
CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53325 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-53325 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...