28562 matches found
CVE-2026-14827 Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter
The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calend...
EUVD-2026-49071
The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...
PT-2026-65096
Name of the Vulnerable Software and Affected Versions Event-Driven Ansible EDA server affected versions not specified Description The Event-Driven Ansible EDA server contains a flaw in the ExternalEventStreamViewSet due to permissive access controls. The system relies exclusively on the Subject...
CVE-2026-12383: Insufficient Verification of Data Authenticity
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
PT-2026-64957
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-14827: Improper Neutralization of Input During Web Page Generation
The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calend...
PT-2026-65103
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-65567: Missing Authorization
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
PT-2026-64851
The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calend...
Siemens SIMATIC S7-1500 CPU 1518 MFP Trust of System Event Data (CVE-2025-68788)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505769; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
iio: event: Fix event FIFO reset race
...
CVE-2015-8138
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/558 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/558 2026-08-06 01:00:06+00:00| seen| https://t.me/KaitNews/558 2026-08-07 01:01:37+00:00| seen| https://t.me/KaitNews/558...
CVE-2016-8706
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/639 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/639 2026-08-06 00:00:05+00:00| seen| https://t.me/KaitNews/639...
CVE-2024-37895
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:07+00:00| seen| https://t.me/EchelonEyes/2937 2026-07-27 00:00:45+00:00| seen| https://t.me/EchelonEyes/2937 2026-07-28 00:00:43+00:00| seen| https://t.me/EchelonEyes/2937...
CVE-2019-6015
creationtimestamp| type| source ---|---|--- 2026-07-25 16:58:07+00:00| seen| https://gist.github.com/kuroma6666/70d2b192280084f50f932d4f0c0dbfc9...
SUSE CVE-2026-64496
In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...
CVE-2026-66013
creationtimestamp| type| source ---|---|--- 2026-07-25 11:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrhr2nn7kh2a 2026-07-25 17:51:13+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrigld2ef32d 2026-07-31 01:39:29+00:00| seen|...
AZL-93731 CVE-2026-64496 affecting package kernel for versions less than 6.6.145.2-1
In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...
CVE-2026-64496
In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...
CVE-2026-64272
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When mms114readreg reads the touch data packet from the device into the touch...