34631 matches found
CVE-2026-15384 Manual Image Crop < 1.15 - Subscriber+ Arbitrary Attachment Image Overwrite via IDOR
The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the authenticated AJAX action that crops attachment images; its only guard passes for any logged-in user. A subscriber-level user can therefore supply an arbitrary attachment ID and...
CVE-2026-15384
The Manual Image Crop WordPress plugin before 1.15 contains an IDOR (Insecure Direct Object Reference) vulnerability in its authenticated AJAX crop action. The endpoint performs no capability check or nonce verification, allowing any subscriber-level user to supply an arbitrary attachment ID and ...
CVE-2026-13712
Divi WordPress theme versions 5.0 through 5.8.1 is vulnerable to contributor-level stored XSS via the Social Media Follow module's Skype URL field; malicious JavaScript stored by a low-privileged user executes when an administrator views the post. CVSS 5.4 medium. Patch to version 5.9.0. No in-th...
CVE-2026-15002
The Platnosci Online Blue Media Autopay plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.0 via the 'bmwoocommercecsseditorcontent' POST parameter. This is due to the CssEditor::handlesave method being wired to the WordPress 'init' hook by...
CVE-2026-73045
creationtimestamp| type| source ---|---|--- 2026-08-16 00:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5uz564qo2o...
UBUNTU-CVE-2026-72404
In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling synchronizenet to wait for concurrent RCU readers transmitters to finish:...
CVE-2026-74255
In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipcl2sendmsg Syzbot reported a slab-use-after-free in ipvlanhardheader when called from tipcl2sendmsg. The root cause is that tipcdisablel2media calls synchronizenet while b-mediaptr is still valid. This allows...
CVE-2026-72404
CVE-2026-72404 concerns the Linux kernel TIPC UDP bearer teardown where a use-after-free can occur due to premature dst_cache_destroy() during cleanup_bearer(). The issue arises when dst_cache_destroy() frees per-CPU cache memory and cached entries before all readers finish, risking use-after-fre...
PT-2026-76442
These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-72691
In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc l2 send msg Syzbot reported a slab-use-after-free in ipvlan hard header when called from tipc l2 send msg. The root cause is that tipc disable l2 media calls synchronize net while b-media ptr is still valid...
OPENSUSE-SU-2026:11528-1 wasm-bindgen-0.2.100-2.1 on GA media
These are all security issues fixed in the wasm-bindgen-0.2.100-2.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-72404
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling...
PT-2026-76443
These are all security issues fixed in the go1.26-1.26.6-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-76446
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11516-1 go1.25-1.25.13-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-76440
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11520-1 kubevirt1.9-container-disk-1.9.0-1.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-76444
These are all security issues fixed in the gzip-1.14-3.1 package on the GA media of openSUSE Tumbleweed...