278049 matches found
ROS-20261006-73-0282
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-106393
Name of the Vulnerable Software and Affected Versions WP2LEADS versions prior to 3.5.8 Description Broken access control allows users with the Subscriber role to perform unauthorized actions. Recommendations Update to a version newer than 3.5.7...
HU250 module Privilege Escalation
The vulnerability of the HU250 microprogramming software for modular remote terminals in telemechanics and automation systems from PowerLogic T300 formerly Easergy T300 RTU relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to...
Piwigo mime_content_type Code Execution
The vulnerability of the mimecontenttype function in the Piwigo content management system is related to the unlimited loading of files of a dangerous type, due to the lack of strict checks on file extensions and content. Exploiting this vulnerability could allow an attacker operating remotely to...
CVE-2026-82924: Improper Control of Interaction Frequency
Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...
CVE-2026-106441: Improper Control of Generation of Code
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. A...
CVE-2026-48199: Missing Authorization
Unauthenticated Broken Access Control in Sermon'e = 1.0.2 versions...
ROS-20261006-73-0177
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0153
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0237
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0148
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-32576: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro for WooCommerce: from n/a through 3.2.2...
ROS-20261006-73-0286
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-104033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat ...
CVE-2026-66588: Undefined Security Weakness
Unauthenticated Broken Access Control in The7 = 14.2.2 versions...
CVE-2026-42638: Missing Authorization
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...
CVE-2026-32578: Missing Authorization
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...
CVE-2026-102915: Missing Authorization
Subscriber Broken Access Control in WPO365 = 44.1 versions...