34325 matches found
EUVD-2026-64145
FiftyOne is an open-source platform for refining high-quality datasets and visual AI models. Prior to 1.17.0, the FiftyOne App/API server in fiftyone/server/app.py and the /media route in fiftyone/server/routes/media.py unconditionally return Access-Control-Allow-Origin: . Because the embedded...
CVE-2026-77087
creationtimestamp| type| source ---|---|--- 2026-08-21 16:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtm4yhm7ea26 2026-08-21 16:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ij7ehq2e 2026-08-21 16:23:35+00:00| seen|...
CVE-2026-18290
creationtimestamp| type| source ---|---|--- 2026-08-21 12:07:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtlpxwzwki2i 2026-08-21 12:07:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117133414439759245...
CVE-2026-77776
creationtimestamp| type| source ---|---|--- 2026-08-21 12:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117133386151660614 2026-08-21 12:00:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtlpl4zilt2n 2026-08-21 12:13:30+00:00| seen|...
CVE-2026-77683
creationtimestamp| type| source ---|---|--- 2026-08-21 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtlkk3vbum2n 2026-08-21 10:30:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117133032027242771 2026-08-23 09:00:28+00:00| seen|...
WordPress AI Agent by SiteGround plugin <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint vulnerability
Missing Authorization to Authenticated Contributor+ Arbitrary Media Upload via /generate-content REST Endpoint vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin SG AI Studio versions = 1.2.7...
WordPress Easy Media Replace plugin <= 0.2.0 - Author+ Stored XSS via Attachment Title vulnerability
Author+ Stored XSS via Attachment Title vulnerability discovered by testoun in WordPress Plugin Easy Media Replace versions = 0.2.0...
CVE-2026-16959
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
EUVD-2026-63820
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
CVE-2026-16959
CVE-2026-16959 affects the Media Library Assistant WordPress plugin prior to version 3.40 . The root cause is an unvalidated search parameter (identified as mla_search_connector ) that is concatenated directly into a SQL query within a media-library query handler, enabling SQL injection by authen...
CVE-2026-16959 Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
Chromium: CVE-2026-76035 Inappropriate implementation in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-76035
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
OPENSUSE-SU-2026:11561-1 chromedriver-151.0.7922.169-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed...
Debian dsa-6458 : gir1.2-gst-plugins-bad-1.0 - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6458 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6458-1 [email protected] https://www.debian.org/securit...
OPENSUSE-SU-2026:11565-1 libecpg6-18.6-1.1 on GA media
These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-72818
creationtimestamp| type| source ---|---|--- 2026-08-20 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdyg4ok727 2026-08-21 00:31:12+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkj2hszzn25...
CVE-2026-66592
creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkgqbuq2c 2026-08-20 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7o3igv2m...
WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Social Media & Share Icons versions = 2.9.9...