319124 matches found
EUVD-2026-59850
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...
CVE-2026-12905
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...
CVE-2026-12905 Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...
GHSA-H84G-69H7-MW6V vulnerabilities
Vulnerabilities for packages: debezium...
MINI-QCQR-36WV-88H7
Bulletin has no description...
MINI-7777-GMRC-VWQ4
Bulletin has no description...
MINI-XFWV-WGVQ-JPQC
Bulletin has no description...
MINI-FJ87-W8HF-FJPG
Bulletin has no description...
MINI-Q69R-8HQV-MHHV
Bulletin has no description...
MINI-4GRJ-PWG8-Q3Q6
Bulletin has no description...
MINI-752G-W5MF-G56Q
Bulletin has no description...
MINI-XRG7-CJQX-3XWQ
Bulletin has no description...
MINI-8R69-FPCF-39J8
Bulletin has no description...
MINI-X923-M3RR-P4M9
Bulletin has no description...
PT-2026-73082
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=bookly mobile staff cabinet in frontend/modules/mobile staff cabinet/api/handlers/Handle...
containerized-data-importer1.66-api-1.66.0-1.1 on GA media (moderate)
containerized-data-importer1.66-api-1.66.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11514-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832...
Security Bulletin: This Power System update is being released to address CVE-2026-22796
Summary PowerVM relies on OpenSSL to support a range of features, such as virtual TPM, LPM, and other functionalities that require cryptographic operations. This bulletin provides a remediation for the impacted vulnerability, CVE-2026-22796 by upgrading PowerVM and thus addressing the exposure to...
CVE-2026-74764
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...
