633 matches found
CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...
CVE-2026-108073
The SureCart WordPress plugin, in versions prior to 4.9.5 , is vulnerable to an unauthenticated private catalog data disclosure. The root cause is that the plugin fails to restrict related objects or strip private fields when an anonymous visitor reads a single upsell funnel via the REST API . Th...
CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...
PT-2026-120609
WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...
GO-2026-6726 Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts) in code.vikunja.io/api
Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
Astra Linux – Vulnerability in Nasm
In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs due to a malicious .asm file during the call to settextfree from expandonesmacro in asm/preproc.c...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: The issue with bitmap corruption when using CLOSERANGEUNSHARE in closerange has been fixed. The function copyfdbitmapsnew, old, count is expected to copy the first count/BITSPERLONG bits from old-fullfdsbits and fill the rest wit...
CVE-2026-76665
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow...
CVE-2026-76666
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667 HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
EUVD-2026-101828
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667
A security vulnerability in HPE NonStop EXPAND allows for an out-of-bounds memory read . This flaw could lead to memory corruption , buffer overflows , or stack overflows on the local system. Vulnerable software includes EXPAND T9057 (versions T9057L02^AIG and earlier). HPE has released fixes; us...
CVE-2026-76666 HPE NonStop EXPAND - Out-of-Bounds memory read
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
EUVD-2026-101827
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76666
A security vulnerability in HPE NonStop EXPAND may result in an out-of-bounds memory read (CWE-125). The affected software version is T9057 - T9057L02^AIG and earlier . While the provided documentation lists several vulnerabilities for HPE NonStop products, the specific remediation for this CVE I...
EUVD-2026-101826
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow...
CVE-2026-76665
A security vulnerability in HPE NonStop EXPAND may cause an out-of-bounds memory read resulting in a buffer overflow . This flaw could lead to local Denial of Service (DoS) , memory corruption , and stack overflow . Affected software versions include EXPAND T9057 - T9057L02^AIG and earlier . HPE ...