6106 matches found
CVE-2026-8909 WpMobi <= 0.0.3 - Cross-Site Request Forgery via save_general_settings Action
The WpMobi plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.3. This is due to missing or incorrect nonce validation on the handleSaveGeneralSettings function. This makes it possible for unauthenticated attackers to modify the plugin's...
PT-2026-47681
Name of the Vulnerable Software and Affected Versions WpMobi versions prior to 0.0.4 Description The WpMobi plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a flaw where an attacker tricks a victim into performing actions they did not intend to. This occurs due to missing or...
PT-2026-48599
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...
PT-2026-48596
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description A heap buffer overflow occurs due to an integer overflow. A heap buffer overflow is a memory corruption issue where data is written beyond the boundaries of a buffer allocated on the heap,...
PT-2026-48609
Name of the Vulnerable Software and Affected Versions gdk-pixbuf-loader-libheif versions prior to 1.23.0-2.1 Description Security issues were identified and resolved in the gdk-pixbuf-loader-libheif package. Recommendations Update to version 1.23.0-2.1...
OPENSUSE-SU-2026:10984-1 libzypp-17.38.13-1.1 on GA media
These are all security issues fixed in the libzypp-17.38.13-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10977-1 MozillaFirefox-151.0.3-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10980-1 flannel-0.28.5-1.1 on GA media
These are all security issues fixed in the flannel-0.28.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10978-1 SDL3_sound-devel-3.2.0-1.1 on GA media
These are all security issues fixed in the SDL3sound-devel-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10985-1 libIex-3_4-33-3.4.12-1.1 on GA media
These are all security issues fixed in the libIex-34-33-3.4.12-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10979-1 agama-web-ui-21+360.16caae772-44.1 on GA media
These are all security issues fixed in the agama-web-ui-21+360.16caae772-44.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10989-1 python311-Django4-4.2.30-3.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.30-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-48597
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13-1.1 Description An issue exists allowing path traversal via the keyhint variable. Recommendations Update to version 17.38.13-1.1...
PT-2026-48115
App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The -B and -C context options accepted any positive integer, and ack...
PT-2026-48114
App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The project-source option blocklist in App::Ack::ConfigLoader does not include...
OPENSUSE-SU-2026:10971-1 prometheus-blackbox_exporter-0.26.0-6.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.26.0-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10965-1 ack-3.10.0-1.1 on GA media
These are all security issues fixed in the ack-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...