27481 matches found
PT-2026-24674
The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check in date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...
GHSA-WG9X-QFGW-PXHJ
creationtimestamp| type| source ---|---|--- 2026-03-10 23:10:05+00:00| seen| https://gist.github.com/alon710/dc81c1a2b7f709c06e63d38f24ae7eeb...
GHSA-P9XR-7P9P-GPQX
creationtimestamp| type| source ---|---|--- 2026-03-10 22:40:05+00:00| seen| https://gist.github.com/alon710/b3f6f3a2d0a03d351cf9f1e0f3b1967e...
SUSE-SU-2026:20661-1 Security update for virtiofsd
This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257912...
CVE-2026-25188
creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 18:35:44+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116206320771074918 2026-03-10 19:07:55+00:00| seen|...
CVE-2026-25178
creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...
CVE-2026-24292
creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...
Security update for python-maturin
This update for python-maturin fixes the following issue: CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257918. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...
SUSE-SU-2026:0860-1 Security update for python-maturin
This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257918...
CVE-2026-3611
creationtimestamp| type| source ---|---|--- 2026-03-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-03 2026-03-12 20:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3611 2026-03-12 21:36:23+00:00| seen|...
CVE-2025-69614
Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-10-31...
CVE-2026-27689
creationtimestamp| type| source ---|---|--- 2026-03-10 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/ 2026-03-10 14:56:21+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/sap-security-advisory-march-2026-monthly-rollup-av26-209 2026-03-12 03:00:05+00:00| seen|...
CVE-2025-11739
creationtimestamp| type| source ---|---|--- 2026-03-10 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0254/ 2026-03-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-04...
CVE-2025-40943
creationtimestamp| type| source ---|---|--- 2026-03-10 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0255/ 2026-03-10 14:01:00+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-18 2026-03-12 11:00:00+00:00| seen|...
Build Numbers and Versions of Veeam Plug-In for HPE Morpheus VM Essentials
This KB article lists all versions of the Veeam Plug-in for HPE Morpheus VM Essentials and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-in for HPE Morpheus VM Essentials 2 Releases Veeam Plug-in for HPE Morpheus VM Essentials 2.0...
GHSA-9Q36-67VC-RRWG
creationtimestamp| type| source ---|---|--- 2026-03-09 20:40:05+00:00| seen| https://gist.github.com/alon710/0a125c412f2d2b3042221df7022c946c...
CVE-2026-3752
A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.php of the component GET Parameter Handler. This manipulation of the argument Date causes sql injection. It is possible to initiate the...
CVE-2026-3751
A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2021-22054link is external Omnissa Workspace ONE Server-Side Request Forgery CVE-2025-26399link is external SolarWinds Web Help Desk Deserialization of...