5942 matches found
Exploit for CVE-2026-12277
CVE-2026-12277 Frontend File Manager Plugin WordPress...
CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend...
CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend...
CVE-2026-48956
CVE-2026-48956 affects Joomla! Core (com_modules). Affected component: com_modules in Joomla! Core with an improper access check that allows authenticated users to display the list of modules in the frontend. Root cause: incorrect access control in the frontend module listing. Impact: potential e...
CVE-2026-48956 Joomla! Core - [20260710] - Incorrect Access Control in com_modules
An improper access check allows users to display a list of modules in the frontend...
EUVD-2026-42065
An improper access check allows users to display a list of modules in the frontend...
CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend...
CVE-2026-48956 Joomla! Core - [20260710] - Incorrect Access Control in com_modules
An improper access check allows users to display a list of modules in the frontend...
amundsen-frontend (>=1.0.1, <=2.3.0), amundsen-metadata (>=1.0.17, <=3.5.0) +10 more potentially affected by CVE-2025-71176 via pytest (3.5.1)
pytest PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - amundsen-frontend =1.0.1, =1.0.17, =2.4.1, =0.1.4, =0.1.3, =1.2.0, =1.10.0, =0.2.7, =1.2.0, =0.1.0, =0.1.2 Source cves: CVE-2025-71176 Source...
vLLM vulnerable to remote code execution via transformers_utils/get_config
Summaryvllm has a critical remote code execution vector in a config class named NemotronNanoVLConfig. When vllm loads a model config that contains an automap entry, the config class resolves that mapping with getclassfromdynamicmodule... and immediately instantiates the returned class. This fetch...
autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-53878 via django (4.0.4)
django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...
autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-53878 via django (4.0.6)
django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...
autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2026-48588 via django (3.2.2)
django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...
autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-53877 via django (4.0.6)
django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...
autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-53877 via django (4.0.4)
django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...
autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2024-45231 via django (3.2.2)
django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...
Malicious code in notepad-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7328 Malicious code in notepad-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...