91675 matches found
EUVD-2026-53718
PeproDev WooCommerce Receipt Uploader PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce, all versions up to and including 2.8.0 latest on wordpress.org; no fixed version available at the time of writing, is vulnerable to...
CVE-2026-14313 PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR
PeproDev WooCommerce Receipt Uploader PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce, all versions up to and including 2.8.0 latest on wordpress.org; no fixed version available at the time of writing, is vulnerable to...
CVE-2026-18990
A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...
postfix: buffer over-read via malformed enhanced status code
A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...
CVE-2026-18990 letta-ai LettaBot API Status Route server.ts missing authentication
A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...
CVE-2026-18990
CVE-2026-18990 affects letta-ai LettaBot 0.2.0. The issue concerns an unexplained vulnerability in the file src/api/server.ts of the API Status Route, resulting in missing authentication. Exploitation can be performed remotely, and public exploit code exists. Vendor was contacted but did not resp...
MINI-G32F-F85R-5J46
Bulletin has no description...
MINI-3J87-RGP5-Q39G
Bulletin has no description...
MINI-P4CC-24RP-47HQ
Bulletin has no description...
MINI-M4VC-WGJ3-MG7X
Bulletin has no description...
MINI-F8RX-77JP-PP3H
Bulletin has no description...
MINI-JJCH-H4J6-QHPR
Bulletin has no description...
MINI-JJ2M-2MPH-7FVP
Bulletin has no description...
MINI-29VR-X773-4RXP
Bulletin has no description...
MINI-638J-XM97-4JJ2
Bulletin has no description...
MINI-45GQ-55HC-2VVC
Bulletin has no description...
MINI-7VJ2-3GH5-QRP6
Bulletin has no description...
MINI-PRMH-QC6P-MX86
Bulletin has no description...
EUVD-2026-53697
A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack...
UBUNTU-CVE-2026-67870
In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...