59044 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: wifi: ath12k: Avoid accessing uninitialized arvif-ar during beacon missed situations. During beacon missed handling, the ath12k driver iterates over active virtual interfaces vifs and attempts to access the radio object ar via...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF Use After Free issues during group creation. This commit addresses the issue where a malicious user space could potentially alter the handle of a group and attempt to call the GROUPDESTROY ioctl...
CVE-2026-24213
creationtimestamp| type| source ---|---|--- 2026-05-20 05:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb52im2xs2i 2026-05-20 19:07:57+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmcm2bqg2p2o 2026-06-22 00:19:52+00:00| seen|...
CVE-2026-34744
creationtimestamp| type| source ---|---|--- 2026-05-20 03:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaxtnq2ck2t...
CVE-2026-35593
creationtimestamp| type| source ---|---|--- 2026-05-20 02:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavmn245y2r...
CVE-2026-8493
creationtimestamp| type| source ---|---|--- 2026-05-20 02:50:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavhqnpz72i...
CVE-2025-15369 Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation
The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getcontenteditor function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to create...
CVE-2025-15369
CVE-2025-15369 affects the WordPress plugin Xpro Addons — 140+ Widgets for Elementor. All versions up to and including 1.5.0 are vulnerable due to a missing capability check in the get_content_editor function, enabling unauthenticated attackers to modify data and create published Xpro templates. ...
CVE-2025-15369 Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation
The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getcontenteditor function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to create...
CVE-2026-6391
The Sentence To SEO keywords, description and tags plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the createadminpage function. This makes it possible for unauthenticated attackers...
CVE-2026-46727
creationtimestamp| type| source ---|---|--- 2026-05-20 00:39:53+00:00| seen| https://bsky.app/profile/k0kubun.com/post/3mmao5vq6wc25 2026-05-21 02:33:02+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mmdetqhuk22x 2026-05-21 08:01:48+00:00| seen|...
CVE-2026-44790
creationtimestamp| type| source ---|---|--- 2026-05-20 00:16:19+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmamu5rnds2m 2026-06-27 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpbbbc4iiu2n...
PT-2026-42247
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.38 Description An issue exists in the ShadowAttribute proposal creation workflow where the add action accepts user-controlled request data without removing the id field before saving the record. Since the underlying...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021551 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid crash when inline data creation follows DIO write When inode is created and written t...
oci-utils security update
-- 0.14.0-22 - Rework systemd service file creation. Orabug: 39316494...
XWiki Platform 安全漏洞
The XWiki Platform is an open-source wiki platform used for creating web collaboration applications. Vulnerabilities exist in versions of the XWiki Platform prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17. These vulnerabilities stem from the POST /wikis/wikiName API not performing...
PT-2026-42370
monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr...
CVE-2026-4885
creationtimestamp| type| source ---|---|--- 2026-05-19 23:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmakf6zijh2a 2026-05-21 12:00:07+00:00| seen| https://t.me/GithubRedTeam/85211 2026-05-21 15:00:17+00:00| seen| Telegram/w5uXU2fuLydowGU1SOSgKNWyV15qQF5OtJmcXbqSodLps...