Lucene search
+L

28604 matches found

Patchstack
Patchstack
•added 2026/06/25 2:23 p.m.•16 views

WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by VanTastic in WordPress Plugin Toolset Forms versions = 2.6.24...

7.5CVSS5.8AI score0.00426EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/06/25 2:16 p.m.•19 views

CVE-2026-56053

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

8.8CVSS0.00518EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/25 2:16 p.m.•15 views

CVE-2026-56049

Contributor Remote Code Execution RCE in Post Snippets = 4.0.19 versions...

8.5CVSS0.00582EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/25 2:16 p.m.•16 views

CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS0.00299EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/25 2:16 p.m.•14 views

CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS6.1AI score0.00299EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/25 2:16 p.m.•12 views

UBUNTU-CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS5.8AI score0.00299EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/06/25 1:34 p.m.•16 views

Security update for nodejs24

This update for nodejs24 fixes the following issues Update to 24.17.0: CVE-2026-2581: undici: Undici: Denial of Service due to uncontrolled resource consumption bsc1268480. CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery...

8.7CVSS6.9AI score0.01554EPSS
SaveExploits3References84
OSV
OSV
•added 2026/06/25 1:34 p.m.•17 views

SUSE-SU-2026:2633-1 Security update for nodejs24

This update for nodejs24 fixes the following issues Update to 24.17.0: - CVE-2026-2581: undici: Undici: Denial of Service due to uncontrolled resource consumption bsc1268480. - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response...

9.8CVSS6AI score0.01554EPSS
SaveExploits3References43
CVE
CVE
•added 2026/06/25 1:16 p.m.•42 views

CVE-2026-42389

CVE-2026-42389 fixes an issue by adding extra hardening in the 5.4.x branch through enhanced validation of incoming answers from authoritative servers (no exploited details provided in the documents).

5.3CVSS5.8AI score0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 1:16 p.m.•45 views

CVE-2026-42389 Reject more queries with invalid header values

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS0.00299EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/25 1:16 p.m.•12 views

CVE-2026-42389 Reject more queries with invalid header values

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS5.8AI score0.00299EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/25 1:16 p.m.•13 views

CVE-2026-42389 Reject more queries with invalid header values

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS5.9AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/06/25 1:16 p.m.•17 views

CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

5.3CVSS5.8AI score0.00299EPSS
SaveExploits0
CVE
CVE
•added 2026/06/25 1:12 p.m.•37 views

CVE-2026-57429

CVE-2026-57429 is associated with the WordPress plugin Slim SEO (versions ≤ 4.6.2). The vulnerability is described as Broken Access Control in the available connected documents (Patchstack listing and CVE records). Public details in the connected sources confirm the affected software/component an...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/25 1:12 p.m.•19 views

EUVD-2026-39385

Contributor Broken Access Control in Slim SEO = 4.6.2 versions...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•9 views

CVE-2026-56049

Contributor Remote Code Execution RCE in Post Snippets = 4.0.19 versions...

8.5CVSS5.9AI score0.00582EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/25 1:12 p.m.•16 views

EUVD-2026-39380

Contributor Remote Code Execution RCE in Post Snippets = 4.0.19 versions...

8.5CVSS5.9AI score0.00582EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•9 views

CVE-2026-54841

Unauthenticated Sensitive Data Exposure in Vitepos = 3.4.2 versions...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/25 1:12 p.m.•10 views

CVE-2026-54823

Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...

9.9CVSS5.9AI score0.00789EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/25 1:12 p.m.•14 views

EUVD-2026-39365

Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...

9.9CVSS5.9AI score0.00789EPSS
SaveExploits0References1
Rows per page
Query Builder