27984 matches found
CVE-2026-64553 net: psample: fix info leak in PSAMPLE_ATTR_DATA
In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLEATTRDATA psample open codes nlaput presumably to avoid wiping the data with 0s just to override it with packet data. This open coding is missing clearing the pad, however, each netlink attr i...
ROOT-OS-UBUNTU-2204-CVE-2025-58050 CVE-2025-58050 in rootio-pcre2 - Patched by Root
Root has patched CVE-2025-58050 in the rootio-pcre2 package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2018-6952 CVE-2018-6952 in rootio-patch - Patched by Root
Root has patched CVE-2018-6952 in the rootio-patch package for Root:Ubuntu:22.04. Multiple fixed versions available...
CVE-2026-59239
Stored Cross-site Scripting CWE-79 in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated low-privileged user to execute arbitrary JavaScript in another user's browser, including administrators, leading to session compromise and account takeover, via a payload...
CVE-2026-54272
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known IPv6...
CVE-2026-48030
Summary: CVE-2026-48030 affects pheditor (PHP) prior to 2.0.4. An OS command injection exists in the terminal action handler by unsafely using the POST parameter and injecting the directory path into shell_exec() without sanitization. This allows an authenticated user with terminal permission to ...
CVE-2026-54272
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known IPv6...
CVE-2026-17529
A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astrmainagent.py. The manipulation of the argument req.functool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available an...
EUVD-2026-49332
phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding...
CVE-2026-66477
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66437
Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...
CVE-2026-65562
Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...
CVE-2026-59536
Unauthenticated Broken Access Control in CoCart – Headless ecommerce = 4.8.4 versions...
CVE-2026-59530
Unauthenticated Broken Access Control in Stripe For WooCommerce = 4.0.7 versions...
EUVD-2026-49252
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66477
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66437
Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...
CVE-2026-66428
Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...