CVE-2026-12994 WCFM – Frontend Manager for WooCommerce <= 6.7.27 - Missing Authorization to Unauthenticated Arbitrary Inquiry Reply Injection via wcfm-my-account-enquiry-manage Controller

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.7.27. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacker...

QEMU: scsi-generic: possible OOB access while handling inquiry request

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

CVE-2019-6501

CVE-2019-6501 affects QEMU 3.1, where scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c can perform out-of-bounds memory writes/reads. This could allow memory corruption within the QEMU process. The Initial Description provides no explicit details on vulnerable versions beyond QEMU 3.1, nor any...