CVE-2026-0318

Palo Alto Networks PAN-OS software on Panorama contains a stack-based buffer overflow vulnerability within the log processing functionality . An attacker can exploit this flaw to trigger a denial of service (DoS) condition, which may cause the Panorama device to enter maintenance mode. This vulne...

EUVD-2026-101636

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service DoS condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud...

CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service DoS condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud...

DEBIAN-CVE-2026-107350

Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in authfile to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM...

AZL-108189 CVE-2026-107350 affecting package pgbouncer 1.25.2-1

Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in authfile to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM...

EUVD-2026-101408

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::EventManager loqQueueinternalInterfaceHandler packetization is vulnerable because EventManager accepts up to the framework LogBuffer maximum, but packet...

PAN-OS: Denial of Service (DoS) on Panorama

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service DoS condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud...

CVE-2026-91883

The Dell Terraform Provider for OME (versions 1.0.0 through 1.2.3) is affected by a vulnerability involving the Insertion of Sensitive Information into Log File within the provider configuration component . A low privileged attacker with remote access could exploit this flaw to cause information ...

EUVD-2026-101161

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91883

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-110607

The BizSpring Shop (specifically through commit cf22d39daaf1 ) contains a payment verification bypass vulnerability. The flaw resides in the PaymentController.testPostPay handler, allowing authenticated buyers to mark orders as paid without actual payment. An attacker can generate a payment log v...

CVE-2026-109968

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read t...

CVE-2026-109968

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read t...

CVE-2026-107319

The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user, such as a Subscriber, to read arbitrary entries from its activity log, including other users' points balances and...

CVE-2026-107320 GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log Disclosure

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450...

CVE-2026-107319 GamiPress < 8.0.6 - Subscriber+ Activity Log Disclosure

The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user, such as a Subscriber, to read arbitrary entries from its activity log, including other users' points balances and...

EUVD-2026-100890

The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user, such as a Subscriber, to read arbitrary entries from its activity log, including other users' points balances and...

CVE-2026-107319

The GamiPress WordPress plugin before version 8.0.6 is vulnerable to an activity log disclosure due to a missing capability check and ownership verification on an authenticated AJAX action . This flaw allows any authenticated user, such as a Subscriber , to read arbitrary entries from the activit...

WordPress GamiPress plugin < 8.0.6 - Subscriber+ Activity Log Disclosure vulnerability

Subscriber+ Activity Log Disclosure vulnerability discovered by Shirshak in WordPress Plugin GamiPress versions 8.0.6...

CVE-2026-104749

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists because IntegrationHandler::executeWithCapture stores...