380981 matches found
CVE-2026-103237: Authorization Bypass Through User-Controlled Key
MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...
PT-2026-103115
MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...
CVE-2026-97241: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-96886: Exposure of Sensitive Information to an Unauthorized Actor
The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, email address and billing address of every customer who has booked a course...
CVE-2026-97302: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
PT-2026-103268
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-103048: URL Redirection to Untrusted Site
URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10...
PT-2026-103007
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post content Parameter data-label DOM Sink in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output...
ROS-20260930-73-0098
The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260930-73-0085
The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260930-73-0130
The vulnerability of the auditclassesinit function in the lib/audit.c module of the Linux kernel is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260930-73-0136
The vulnerability in the fs/btrfs/inode.c module of the Linux operating system is related to the unlocking of a locked resource. Exploiting this vulnerability can allow an attacker to gain access to read and modify data...
ROS-20260930-73-0129
The vulnerability of the auditclassesinit function in the lib/audit.c module of the Linux kernel is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260930-73-0067
The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-103255
Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client versions prior to 7.1.3 Description An authentication bypass exists in the OAuth Single Sign On – SSO OAuth Client plugin that is reachable pre-login. This allows unauthenticated attackers to forge a...
CVE-2026-51867: Undefined Security Weakness
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
CVE-2026-47493: Missing Authorization
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering,...
PT-2026-103495
Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation. This issue affects MediaWiki PageTriage extension: 1.46, 1.45, and 1.43...
PT-2026-103353
🚨 CVE-2026-47493 NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...