226255 matches found
RHSA-2026:43420 Red Hat Security Advisory: acl security update
Bulletin has no description...
EUVD-2026-47899
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...
CVE-2026-65758
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...
WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Qubely versions = 1.8.14...
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Privacy/configuration issue when adding local data in views through 'unbound-control'
...
acl security update
An update is available for acl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Access Control Lists ACLs are used to define fine-grained discretionary access...
RLSA-2026:43420 Important: acl security update
Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...
Panduit IntraVUE
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling. 2. RECOMMENDED PRACTICES CISA recommends users...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...
Malicious code in create-kumo-project (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172586ef83140a92d732376efb734e45aa09958a7800016aa3c229ccf74c81bf Package presents itself as a create--project scaffolder but ships no scaffolding functionality. The bin/run.js entry, invoked when a user runs npx...
Malicious code in bs58-88 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d1dec3ae934b73d28ddd4c002cf93f9a9be597731434f5cfead7fdbb11954f Package bs58-88 mimics the popular bs58 base58 encoder: README, keywords, and repository URL match the real bs58, and index.cjs re-exports...
PT-2026-63912
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers, due to access control deficiencies, allows attackers to trigger service interruptions.
The vulnerability of the dovecot-acl file of Dovecot and OX Dovecot Pro servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers across US Critical Infrastructure
The authoring agencies urgently warn U.S. organizations of ongoing Iranian-affiliated cyber targeting of internet-connected operational technology OT devices, including programmable logic controllers PLCs. These actions disrupted PLCs across several U.S. critical infrastructure sectors through...
PT-2026-64198
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions 3.2.1a14 and earlier Description An exposure of sensitive system information to an unauthorized control sphere allows unauthenticated users to perform asset discovery. Recommendations Update Pronetiqs IntraVUE to a...
PT-2026-64195
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions prior to 3.2.1a14 Description An exposure of sensitive system information to an unauthorized control sphere exists, which could lead to the exposure of the underlying host or share filesystem. Recommendations Update...
PT-2026-64153
Name of the Vulnerable Software and Affected Versions swift-nio-http2 versions prior to 1.45.0 Description SwiftNIO HTTP/2 lacks validation for inbound HEADERS frames, allowing control characters such as CR, LF, NUL, and SP to reach an HTTP/1.1 backend via the HTTP/2-to-HTTP/1 codec. This can lea...
PT-2026-63981
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible within Git VCS roots. VCS Version Control System roots are configurations that define the source code...