24425 matches found
PT-2026-4058
Name of the Vulnerable Software and Affected Versions Vollstart Event Tickets with Ticket Scanner versions through 2.8.3 Description A code injection issue exists in Vollstart Event Tickets with Ticket Scanner. The issue involves improper control of code generation, potentially allowing for code...
PT-2026-3993
Name of the Vulnerable Software and Affected Versions blazethemes News Event versions through 1.0.1 Description An issue exists in blazethemes News Event news-event that allows for unrestricted file uploads with dangerous file types. The vulnerability allows attackers to upload malicious files,...
WordPress plugin News Event code issue vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37938)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37938 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27067)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27067 advisory. - In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN when...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37810)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37810 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event coun...
GHSA-7QQ4-Q9R8-WC7W
creationtimestamp| type| source ---|---|--- 2026-01-21 21:19:37+00:00| seen| Telegram/UBFfKHG06E0U29GGUyxY4K-TiI8MYdEIgyx0Bfd0z-0...
CVE-2026-21929
creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...
CVE-2025-69762
creationtimestamp| type| source ---|---|--- 2026-01-21 21:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxlb564ve2i...
CVE-2021-47861
Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...
CVE-2021-47857
Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows attackers to inject malicious scripts. Attackers can craft a calendar event with malicious JavaScript in the subtitle track label to execute arbitrary code when users view the...
CVE-2021-47861 Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...
CVE-2021-47861 Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...
EUVD-2026-3635
Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...
CVE-2021-47861
CVE-2021-47861 : Event Log Explorer 4.9.3 is affected by an unquoted service path that enables local users to potentially execute arbitrary code with elevated (LocalSystem) privileges during service startup via mislocated executables. Under the documented exploit path, attackers place a malicious...
CVE-2021-47861
Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...
CVE-2021-47857 Moodle 3.10.3 - 'label' Persistent Cross Site Scripting
Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows attackers to inject malicious scripts. Attackers can craft a calendar event with malicious JavaScript in the subtitle track label to execute arbitrary code when users view the...
CVE-2026-20092
creationtimestamp| type| source ---|---|--- 2026-01-21 17:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcx6nqmk2d2m...
CVE-2026-1102
creationtimestamp| type| source ---|---|--- 2026-01-21 16:25:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3ixs35a2l 2026-01-22 12:33:56+00:00| seen| https://t.me/techb0ltGenona/6069 2026-01-22 15:18:05+00:00| seen|...