324562 matches found
MINI-X923-M3RR-P4M9
Bulletin has no description...
PT-2026-73082
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=bookly mobile staff cabinet in frontend/modules/mobile staff cabinet/api/handlers/Handle...
PT-2026-73132
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
containerized-data-importer1.66-api-1.66.0-1.1 on GA media (moderate)
containerized-data-importer1.66-api-1.66.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11514-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832...
SUSE CVE-2026-74453
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submission time and recycled as jobs complete, without ever being cleared. Ea...
SUSE CVE-2026-74557
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsiscsicmdrsp copies the sense data of a SCSI Response from the target-supplied data segment. The segment carries a 2-byte sense length followed by the sense bytes,...
Security Bulletin: This Power System update is being released to address CVE-2026-22796
Summary PowerVM relies on OpenSSL to support a range of features, such as virtual TPM, LPM, and other functionalities that require cryptographic operations. This bulletin provides a remediation for the impacted vulnerability, CVE-2026-22796 by upgrading PowerVM and thus addressing the exposure to...
CVE-2026-74764
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...
Exploit for CVE-2026-9830
CVE-2026-9830 BookingPress Pro API Assessment PoC This reposi...
GHSA-H84G-69H7-MW6V vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, airbyte-platform-fips, hono, airbyte-platform, debezium...
MINI-8RQ8-MF63-PPJW
Bulletin has no description...
MINI-MM6C-2RCQ-XRMR
Bulletin has no description...
MINI-6PW4-2R4M-XH5G
Bulletin has no description...
MINI-3PHV-3936-32V3
Bulletin has no description...
MINI-QFPR-7X36-PHXR
Bulletin has no description...
MINI-RF27-HW36-H9RX
Bulletin has no description...
MINI-4C3P-95GX-GXW7
Bulletin has no description...
MINI-868W-69XG-WMCC
Bulletin has no description...