231876 matches found
CVE-2025-15662
The CVE-2025-15662 issue affects the Printcart Web to Print Product Designer for WooCommerce WordPress plugin up to version 2.5.3. The root cause is that the plugin does not restrict a user-supplied URL before server-side fetching and does not enforce a valid authorization check, enabling unauthe...
CVE-2025-15662 Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files including configuration...
EUVD-2025-210510
The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files including configuration...
CVE-2025-15662
The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files including configuration...
BIT-DOTNET-SDK-2026-50650 .NET Framework Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
BIT-DOTNET-2026-50650 .NET Framework Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
BIT-DOTNET-2026-50646 .NET Framework Remote Code Execution Vulnerability
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
BIT-DOTNET-2026-50526 .NET Tampering Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
BIT-DOTNET-SDK-2026-50526 .NET Tampering Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
PT-2026-65027
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
PT-2026-65139
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory...
PT-2026-65014
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
Privilege Escalation of Poly Devices on the Android Platform
A local attacker who can execute code on the device could potentially escalate privileges through the Android Runtime vulnerability. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that mitigate the potential...
PT-2026-65011
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
PT-2026-65008
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
PT-2026-65030
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
Next.js Framework 16.x < 16.2.11 Middleware Bypass
The Next.js Framework on the remote host is affected by an authentication bypass vulnerability: - Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. CVE-2026-64642 Note...
Linux Distros Unpatched Vulnerability : CVE-2026-13067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured...
PT-2026-65257
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...