321139 matches found
CVE-2026-12905
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...
GHSA-H84G-69H7-MW6V vulnerabilities
Vulnerabilities for packages: debezium...
MINI-QCQR-36WV-88H7
Bulletin has no description...
MINI-7777-GMRC-VWQ4
Bulletin has no description...
MINI-XFWV-WGVQ-JPQC
Bulletin has no description...
MINI-FJ87-W8HF-FJPG
Bulletin has no description...
MINI-4GRJ-PWG8-Q3Q6
Bulletin has no description...
MINI-Q69R-8HQV-MHHV
Bulletin has no description...
MINI-752G-W5MF-G56Q
Bulletin has no description...
MINI-XRG7-CJQX-3XWQ
Bulletin has no description...
MINI-8R69-FPCF-39J8
Bulletin has no description...
MINI-X923-M3RR-P4M9
Bulletin has no description...
PT-2026-73132
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
PT-2026-73082
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=bookly mobile staff cabinet in frontend/modules/mobile staff cabinet/api/handlers/Handle...
containerized-data-importer1.66-api-1.66.0-1.1 on GA media (moderate)
containerized-data-importer1.66-api-1.66.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11514-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832...
SUSE CVE-2026-74453
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submission time and recycled as jobs complete, without ever being cleared. Ea...
SUSE CVE-2026-74557
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsiscsicmdrsp copies the sense data of a SCSI Response from the target-supplied data segment. The segment carries a 2-byte sense length followed by the sense bytes,...
Security Bulletin: This Power System update is being released to address CVE-2026-22796
Summary PowerVM relies on OpenSSL to support a range of features, such as virtual TPM, LPM, and other functionalities that require cryptographic operations. This bulletin provides a remediation for the impacted vulnerability, CVE-2026-22796 by upgrading PowerVM and thus addressing the exposure to...
CVE-2026-74764
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...
