58702 matches found
CVE-2026-75586
Unlimited Elements For Elementor (WordPress plugin) is affected by a Reflected Cross-Site Scripting vulnerability in the formData[id] parameter across all versions up to and including 2.0.17 . The root cause is a front-end AJAX handler registered on the public wp action with no nonce, capability,...
ROOT-OS-UBUNTU-2404-CVE-2026-45836 CVE-2026-45836 in linux - Patched by Root
Root has patched CVE-2026-45836 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31715 CVE-2026-31715 in linux - Patched by Root
Root has patched CVE-2026-31715 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-68218 CVE-2025-68218 in linux - Patched by Root
Root has patched CVE-2025-68218 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-71148 CVE-2025-71148 in linux - Patched by Root
Root has patched CVE-2025-71148 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2026-84221 Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials...
CVE-2026-84221
The Kirki WordPress plugin (versions 6.0.0–6.2.5 ) contains a SQL injection vulnerability in the Content Manager Field ID parameter. A user-supplied identifier is not escaped before being used in a SQL query, allowing authenticated users with editor-level privileges or higher to append arbitrary ...
ROOT-OS-UBUNTU-2204-CVE-2025-39823 CVE-2025-39823 in linux - Patched by Root
Root has patched CVE-2025-39823 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-56692 CVE-2024-56692 in linux - Patched by Root
Root has patched CVE-2024-56692 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-45949 CVE-2026-45949 in linux - Patched by Root
Root has patched CVE-2026-45949 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23303 CVE-2026-23303 in linux - Patched by Root
Root has patched CVE-2026-23303 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2023-52935 CVE-2023-52935 in linux - Patched by Root
Root has patched CVE-2023-52935 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-64451 CVE-2026-64451 in linux - Patched by Root
Root has patched CVE-2026-64451 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-40972 CVE-2024-40972 in linux - Patched by Root
Root has patched CVE-2024-40972 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
SUSE CVE-2026-84185
A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...
GHSA-8737-QX52-HJFF vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
Summary The /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects and postprocess every nested choices.tokenids list directly. Unlike the normal render/generate path, derender does not enforce model context length, resolved maxtokens,...
MINI-5J89-6W36-86M9
Bulletin has no description...
MINI-8R9Q-C22V-JH6V
Bulletin has no description...