28172 matches found
CVE-2026-28174
Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...
CVE-2026-28173
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...
WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by VanTastic in WordPress Plugin WP Event SOlution versions = 4.1.19...
WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by VanTastic in WordPress Plugin WP Event SOlution versions = 4.1.18...
CVE-2026-19484
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...
CVE-2026-19484 @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...
CVE-2026-19484
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...
CVE-2026-19484 @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...
CVE-2026-19484 @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...
CVE-2026-19484
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...
CVE-2026-19484
@fastify/busboy versions 3.1.0–3.2.0 are vulnerable to a Denial of Service via crafted multipart boundaries. The root cause is a fixed 256-entry skip table in the vendored streaming search; a boundary of exactly 252 bytes makes the search needle 256 bytes, truncating the skip distance to zero and...
WordPress Eventin plugin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR vulnerability
Contributor+ Order Information Disclosure via IDOR vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin WP Event SOlution versions 4.1.20...
WordPress Eventin plugin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API vulnerability
Contributor+ Customer PII Disclosure via REST API vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Event SOlution versions 4.1.20...
PT-2026-71408
Name of the Vulnerable Software and Affected Versions @fastify/busboy versions 3.1.0 through 3.2.0 Description A remote unauthenticated attacker can cause a Denial of Service by stalling the Node.js event loop. This occurs when a multipart request is sent with a boundary crafted to exactly 252...
PT-2026-71923
Name of the Vulnerable Software and Affected Versions OpenChoreo versions prior to 1.0.3 OpenChoreo versions prior to 1.1.3 OpenChoreo versions prior to 1.2.0-rc.2 Description The 'POST /api/v1alpha1/autobuild' endpoint in 'internal/openchoreo-api/api/handlers/webhook handler.go' allows...
CVE-2026-19484: Loop with Unreachable Exit Condition
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...