138 matches found
CVE-2026-61996
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
EUVD-2026-112962
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-61996 WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-61996
The WordPress MLS On The Fly plugin in versions
CVE-2026-61996 WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
Favethemes MLS On The Fly SQL injection vulnerability
Favethemes MLS On The Fly versions 1.8.1.5 and earlier contain an SQL injection vulnerability, which is susceptible to SQL injection attacks...
PT-2026-132279
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-61996: favethemes MLS On The Fly: Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin MLS On The Fly versions = 1.8.1.5...
SUSE CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
DEBIAN-CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71885
In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...
UBUNTU-CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890 MLS external commit can remove an arbitrary group member
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890 MLS external commit can remove an arbitrary group member
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890 MLS external commit can remove an arbitrary group member
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...
CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...