6735 matches found
CVE-2026-8466 affecting package rabbitmq-server for versions less than 3.13.7-4
CVE-2026-8466 affecting package rabbitmq-server for versions less than 3.13.7-4. A patched version of the package is available...
CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25
CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...
CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25
CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...
CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25
CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...
CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18
CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...
CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18
CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...
CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6
CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...
CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18
CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...
CVE-2026-44283 affecting package etcd for versions less than 3.5.30-2
CVE-2026-44283 affecting package etcd for versions less than 3.5.30-2. An upgraded version of the package is available that resolves this issue...
WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Phat RiO in WordPress Plugin Support Board versions 3.8.9...
CVE-2026-40546
SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. This issue affects SOPlanning version 1.55 and below...
EUVD-2026-33614
SOPlanning does not verify uploaded file extension. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a legitimate user.csv file alongside a malicious file, which is extracted on the server. When combined with CVE-2026-40547 Path...
CVE-2026-40547
SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 Missing...
CVE-2026-40545 Reflected XSS in SOPlanning
SOPlanning is vulnerable to Reflected XSS via the taches parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue affects SOPlanning version 1.55 and below...
WordPress HT Contact Form plugin <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field vulnerability
Unauthenticated Stored Cross-Site Scripting via File Upload Field vulnerability discovered by Azril Fathoni kiseki - Heroes Cyber Security in WordPress Plugin HT Contact Form 7 versions = 2.8.2...
PT-2026-45356
Name of the Vulnerable Software and Affected Versions SOPlanning versions prior to 1.56 Description Lack of authorization enforcement for backup functionalities allows an unauthenticated attacker to query backup-related endpoints. This can lead to the retrieval of backup archives containing user...
CVE-2026-40544: Improper Neutralization of Input During Web Page Generation
SOPlanning is vulnerable to Stored Cross-Site Scripting XSS via /process/uploadbackup endpoint. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a malicious user.csv file with embedded JavaScript. The injected code is executed in the...
PT-2026-45357
SOPlanning is vulnerable to Stored Cross-Site Scripting XSS via /process/upload backup endpoint. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a malicious user.csv file with embedded JavaScript. The injected code is executed in the...