Lucene search
+L

3029108 matches found

NVD
NVD
•added 2026/11/04 2:17 p.m.•2 views

CVE-2026-121993

wePOS Point Of Sale for WooCommerce before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with only the...

5.3CVSS
SaveExploits0References5
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•0 views

OESA-2026-4723 qt6-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.CVE-2026-105924 Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Q...

7.1CVSS0.00671EPSS
SaveExploits0References6
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•4 views

OESA-2026-4722 qt6-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.CVE-2026-19248 Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in th...

7.1CVSS0.00671EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4721 qt6-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.CVE-2026-105924 Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Q...

7.1CVSS0.00671EPSS
SaveExploits0References6
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4718 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls...

9.8CVSS0.00749EPSS
SaveExploits24References34
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•0 views

OESA-2026-4701 pylint security update

Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...

5.4CVSS0.00115EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4699 pylint security update

Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...

5.4CVSS0.00115EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4700 pylint security update

Pylint is a Python source code analyzer which looks for programming errors, helps enforcing a coding standard and sniffs for some code smells as defined in Martin Fowler's Refactoring book. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done...

5.4CVSS0.00115EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4698 perl-Cpanel-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. %package help Summary : CPanel fork of JSON::XS, fast and correct serializing Provides: perl-Cpanel-JSON-XS-doc...

9.1CVSS0.00514EPSS
SaveExploits0References12
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•4 views

OESA-2026-4697 perl-Cpanel-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. %package help Summary : CPanel fork of JSON::XS, fast and correct serializing Provides: perl-Cpanel-JSON-XS-doc...

9.1CVSS0.00514EPSS
SaveExploits0References12
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4666 bind security update

Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: In a BIN...

8.1CVSS0.00953EPSS
SaveExploits1References5
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•0 views

OESA-2026-4665 bind security update

Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: In a BIN...

8.1CVSS0.00953EPSS
SaveExploits1References5
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4664 bind security update

Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: In a BIN...

8.1CVSS0.00953EPSS
SaveExploits1References5
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•2 views

OESA-2026-4663 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 13.0.0,...

9.2CVSS0.00696EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/11/04 1:34 p.m.•3 views

CVE-2026-121993 wePOS before 2.0.3 Missing Authorization via payment/process Endpoint

wePOS Point Of Sale for WooCommerce before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with only the...

5.3CVSS
SaveExploits0References5
CVE
CVE
•added 2026/11/04 1:34 p.m.•5 views

CVE-2026-121993

wePOS Point Of Sale for WooCommerce before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with only the...

5.3CVSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/11/04 1:25 p.m.•3 views

patch-tuesday-report

patch-tuesday-report Small, dependency-free Python CLI that t...

8.8CVSS8.3AI score0.09813EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2026/11/04 1:24 p.m.•4 views

Exploit for CVE-2026-98260

Rootline Android front end for CVE-2026-98260 POSIX CPU...

7.8CVSS7.8AI score0.00185EPSS
SaveExploits24
GithubExploit
GithubExploit
•added 2026/11/04 1:22 p.m.•2 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-php-fpm-rce - unauthenticated RCE exploit for PHP-FP...

9.8CVSS8.8AI score0.99999EPSS
SaveExploits523
GithubExploit
GithubExploit
•added 2026/11/04 1:21 p.m.•2 views

Exploit for Use After Free in Linux Linux_Kernel

ghostlock-pd2118c-4.19.152 A full field report of CVE-2026-...

7.8CVSS0.00891EPSS
SaveExploits156
Rows per page
Query Builder