CGA-2QM6-W4MX-PV78

Bulletin has no description...

CGA-2GXX-5QQP-J784

Bulletin has no description...

CGA-2P2C-52PX-F77F

Bulletin has no description...

PT-2026-5280

TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumerate valid usernames by manipulating the 'notes' parameter. Attackers can inject conditional time delays in the add entry.php endpoint to determine user existence by measuring...

CGA-PF9V-45GC-F4GQ

Bulletin has no description...

CGA-9HQF-JC89-W38W

Bulletin has no description...

CGA-6MM3-886H-HFRG

Bulletin has no description...

CGA-4QXP-7M39-XV3V

Bulletin has no description...

kernel: smb: client: Fix use-after-free in cifs_fill_dirent

A use-after-free flaw was found in cifsfilldirent in fs/cifs/readdir.c in smb client in the Linux Kernel. This flaw could allow an attacker to crash the system due to race problem. This vulnerability could even lead to a kernel information leak problem...

CVE-2026-1389 Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion

The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.4. This is due to the plugin not verifying that a user has permission to access the requested resource in the...

CVE-2026-1310 Simple calendar for Elementor <= 1.6.6 - Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion

The Simple calendar for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.6.6. This is due to missing capability checks on the migaajaxeditorcaldelete function that is hooked to the migaeditorcaldelete AJAX action with both authenticated...

CGA-XMRX-XM58-CQQX

Bulletin has no description...

MINI-HXP6-RPWW-6V3H

Bulletin has no description...

ECHO-4D87-77FE-13DC

Bulletin has no description...

ECHO-89E3-FC09-0117

Bulletin has no description...

ECHO-A686-6638-8AD7

Bulletin has no description...

ECHO-AF64-C148-BEE6

Bulletin has no description...

ECHO-4BEB-0BD6-4115

Bulletin has no description...

ECHO-6244-3067-2F2A

Bulletin has no description...

PT-2026-5070

The Simple calendar for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.6.6. This is due to missing capability checks on the miga ajax editor cal delete function that is hooked to the miga editor cal delete AJAX action with both...