45111 matches found
CVE-2026-65525
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
bk-plugin-framework (>=2.3.0rc1, <=2.4.0rc0), bk-plugin-runtime (>=2.1.0rc1, <=2.2.0rc0) potentially affected by CVE-2026-50271 via ddtrace (0.14.1)
ddtrace PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - bk-plugin-framework =2.3.0rc1, =2.1.0rc1, =2.2.0rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...
CVE-2026-65525
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
CVE-2026-65525 WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
CVE-2026-65525
CVE-2026-65525 affects the WordPress Civi Framework plugin up to version 2.2.0. The issue is unauthenticated broken access control, enabling access to resources or actions that should be restricted. The available documents identify the affected software and the vulnerability class but do not prov...
EUVD-2026-48126
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Civi Framework versions = 2.2.0...
USN-8596-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8574-2 linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
.NET 8.0 security, bug fix, and enhancement update
An update is available for dotnet8.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
RLSA-2026:41898 Important: .NET 10.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10...
RLSA-2026:41899 Important: .NET 9.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...
RLSA-2026:41901 Important: .NET 8.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29...
PT-2026-64005
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise...
RHEL 10 : .NET 8.0 (RHSA-2026:41893)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41893 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
PT-2026-63979
Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...
PT-2026-64212
Name of the Vulnerable Software and Affected Versions React Router versions 6.4.0 through 7.17.0 Description In Framework Mode and Data Mode applications performing manual SSR Server-Side Rendering, a flaw exists where attacker-supplied input can overwrite specific aspects of errors caught during...
CVE-2026-65525: Missing Authorization
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
PT-2026-63974
Name of the Vulnerable Software and Affected Versions Grav versions 1.7.0 through 2.0.8 Description Authenticated users with create or update permissions on Flex-based directories, such as Flex Users, Flex Pages, Flex Objects, or custom Flex types, can execute arbitrary shell commands on the...