EUVD-2026-51596

Contao: Server-Side Request Forgery SSRF via Unvalidated RSS Feed URL in Feed Reader Module...

Astra Linux – Vulnerability in lua5.3

The vulnerability of the lmathlib.c component of the Lua script interpreter is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROOT-OS-DEBIAN-12-CVE-2025-5372 CVE-2025-5372 in libssh - Patched by Root

Root has patched CVE-2025-5372 in the libssh package for Root:Debian:12. Multiple fixed versions available...

CLSA-2026-1784509765 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.24-tuxcare.4...

CLSA-2026-1779238056 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.3-tuxcare.1...

CLSA-2026-1779842935 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.39-tuxcare.11...

CLSA-2026-1776126823 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1...

CLSA-2026-1774225210 TuxCare security update for ssri (1 CVE)

TuxCare rebuilt ssri to address 1 CVE. Fixed in 5.3.0-tuxcare.1...

WordPress Event Booking Manager for WooCommerce plugin < 5.3.7 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin WpEvently versions 5.3.7...

MINI-M6X2-953M-X536

Bulletin has no description...

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded files, and its file upload functionality is gated only by an API that is enabled by default and authenticated with hardcoded credentials shipped identically across all...

CVE-2026-65490

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...

CVE-2026-65490

Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions...

EUVD-2026-48144

Contributor SQL Injection in Create by Mediavine = 2.5.3 versions...

EUVD-2026-46830

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Integration. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Managemen...

PT-2026-63802

Name of the Vulnerable Software and Affected Versions Create by Mediavine versions prior to 2.5.4 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, specifically affecting users with contributor...

Plone RestrictedPython < 5.3 / 6.x < 6.1 RCE

The version of RestrictedPython installed on the remote host is prior to 5.3, or 6.x prior to 6.1. It is, therefore, affected by a remote code execution vulnerability due to not checking access to stack frames and their attributes. An authenticated, remote attacker can exploit this to bypass...

CVE-2026-60583

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Install. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management...

CVE-2026-60584

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: CSV Management. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation...

CVE-2026-60433

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Integration. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Managemen...